HP Cisco MDS 9120 Cisco MDS 9000 Family Fabric Manager Configuration Guide, Re - Page 854

Using IPsec Chapter 44 Configuring IPsec Network Security Send documentation comments to [email protected] Note The IPsec feature inserts new headers in existing packets (see the "Configuring the MTU Frame Size" section on page 52-5 for more information). Using IPsec To use the IPsec feature, follow these steps: Step 1 Step 2 Obtain the ENTERPRISE_PKG license to enable IPSEC for iSCSI to enable IPsec for FCIP. See Chapter 10, "Obtaining and Installing Licenses." Configure IKE as described in the "Manually Configuring IPsec and IKE" section on page 44-13. Note The IPsec feature inserts new headers in existing packets (see the "Configuring the MTU Frame Size" section on page 52-5). This section contains the following topics: • IPsec Compatibility, page 44-4 • IPsec and IKE Terminology, page 44-5 • Supported IPsec Transforms and Algorithms, page 44-6 • Supported IKE Transforms and Algorithms, page 44-6 IPsec Compatibility IPsec features are compatible with the following Cisco MDS 9000 Family hardware: • Cisco 14/2-port Multiprotocol Services (MPS-14/2) modules in Cisco MDS 9200 Switches or Cisco MDS 9500 Directors • Cisco MDS 9216i Switch with the 14/2-port multiprotocol capability in the integrated supervisor module. Refer to the Cisco MDS 9200 Series Hardware Installation Guide for more information on the Cisco MDS 9216i Switch. • The IPsec feature is not supported on the management interface. IPsec features are compatible with the following fabric setup: • Two connected Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release 2.0(1b) or later. • A Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release 2.0(1b) or later connected to any IPsec compliant device. • The following features are not supported in the Cisco SAN-OS implementation of the IPsec feature: - Authentication Header (AH). - Transport mode. - Security association bundling. 44-4 Cisco MDS 9000 Family CLI Configuration Guide OL-16184-01, Cisco MDS SAN-OS Release 3.x