Cisco WS-C2950T-24 Hardware Installation Guide - Page 47

Secure Key, Cryptographic Accelerator, Slot, Port, and Interface Information

Page 47 highlights

Chapter 1 Overview of the Routers Slot, Port, and Interface Information Secure Key A hardware secure key storage unit is provided on the Cisco 3925 and Cisco 3945 routers to safely store passwords and credentials. The secure key storage unit is a self-contained tamper-resistant computer key-store that acts as a black box for credential storage by accepting credentials and never returning them. Cryptographic Accelerator Cisco 3925E and Cisco 3945E ISRs ship with a Services Performance Engine that includes an onboard cryptographic accelerator. It shares security processing for SSLVPN and IPSec. By default, acceleration of SSL is disabled so IPSec performance is maximized. If you want to set up the router as an SSLVPN gateway, enable the SSLVPN feature with the crypto engine accelerator bandwidth-allocation ssl fair command. To learn more about the cryptographic accelerator, see the Configuring the Security Features module in the Cisco 3900 series, 2900 series, and 1900 series Integrated Services Routers Software Configuration Guide at Cisco.com. Slot, Port, and Interface Information Table 1-11 and Table 1-12 show slot, port, and interface numbering ranges. On the Cisco 2901 router, the numbering format for slots and ports is defined as follows: interface type 0/slot/port. "0" indicates slots that are built into the chassis of a router. On the Cisco 2901 router, all slots begin with "0," because all slots are built into the chassis. On the Cisco 2911, 2921, 2951, and Cisco 3900 series routers, some slots are built into the chassis and some are external. Slots that are part of a network module or an extension voice module have numbers that begin with "1" or "2," respectively. See the module documentation for more information. Table 1-11 Slot, Port, and Interfaces Slots, Ports, Interface GE 29011 Gi0/0,Gi0/1 USB usbflash0, usbflash1 usbtoken0, usbtoken1 Logical ISM-GE interface interface ISM 0/0 via PCIe Logical ISM-GE interface interface ISM 0/1 via MGF HWIC and VWIC interface interface0/0/port interface0/1/port interface0/2/port interface0/3/port Double-Wide HWIC interface interface0/1/port interface0/3/port 2911 & 2921 Gi0/0,Gi0/1,GI0/2 usbflash0, usbflash1 usbtoken0, usbtoken1 service-modulename-Gi 0/0 service-modulename-Gi 0/1 interface0/0/port interface0/1/port interface0/2/port interface0/3/port interface0/1/port interface0/3/port 2951 & 3925 & 3945 3925E & 3945E Gi0/0,Gi0/1,GI0/2 Gi0/0,Gi0/1,GI0/2, GI0/3 usbflash0, usbflash1 usbflash0, usbflash1 usbtoken0, usbtoken1 usbtoken0, usbtoken1 service-module- - name-Gi 0/0 service-module- - name-Gi 0/1 interface0/0/port interface0/1/port interface0/2/port interface0/3/port interface0/0/port interface0/1/port interface0/2/port interface0/1/port interface0/3/port interface0/1/port OL-18712-02 Cisco 2900 Series and 3900 Series Hardware Installation Guide 1-27

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220

1-27
Cisco 2900 Series and 3900 Series Hardware Installation Guide
OL-18712-02
Chapter 1
Overview of the Routers
Slot, Port, and Interface Information
Secure Key
A hardware secure key storage unit is provided on the Cisco 3925 and Cisco 3945 routers to safely store
passwords and credentials. The secure key storage unit is a self-contained tamper-resistant computer
key-store that acts as a black box for credential storage by accepting credentials and never returning
them.
Cryptographic Accelerator
Cisco 3925E and Cisco 3945E ISRs ship with a Services Performance Engine that includes an onboard
cryptographic accelerator. It shares security processing for SSLVPN and IPSec. By default, acceleration
of SSL is disabled so IPSec performance is maximized.
If you want to set up the router as an SSLVPN gateway, enable the SSLVPN feature with the
crypto engine accelerator bandwidth-allocation ssl
fair
command. To learn more about the
cryptographic accelerator, see the
Configuring the Security Features
module in the
Cisco 3900 series,
2900 series, and 1900 series Integrated Services Routers Software Configuration Guide
at Cisco.com.
Slot, Port, and Interface Information
Table 1-11
and
Table 1-12
show slot, port, and interface numbering ranges.
On the Cisco 2901 router, the numbering format for slots and ports is defined as follows:
interface type
0/slot/port
. “0” indicates slots that are built into the chassis of a router. On the Cisco 2901 router, all
slots begin with “0,” because all slots are built into the chassis. On the Cisco 2911, 2921, 2951, and Cisco
3900 series routers, some slots are built into the chassis and some are external.
Slots that are part of a network module or an extension voice module have numbers that begin with “1”
or “2,” respectively. See the module documentation for more information.
Table 1-11
Slot, Port, and Interfaces
Slots, Ports, Interface
2901
1
2911 & 2921
2951 & 3925 & 3945
3925E & 3945E
GE
Gi0/0,Gi0/1
Gi0/0,Gi0/1,GI0/2
Gi0/0,Gi0/1,GI0/2
Gi0/0,Gi0/1,GI0/2,
GI0/3
USB
usbflash0, usbflash1
usbtoken0, usbtoken1
usbflash0, usbflash1
usbtoken0, usbtoken1
usbflash0, usbflash1
usbtoken0, usbtoken1
usbflash0, usbflash1
usbtoken0, usbtoken1
Logical ISM-GE interface
via PCIe
interface ISM 0/0
service-module-
name-
Gi 0/0
service-module-
name-
Gi 0/0
Logical ISM-GE interface
via MGF
interface ISM 0/1
service-module-
name-
Gi 0/1
service-module-
name-
Gi 0/1
HWIC and VWIC
interface
interface
0/0/
port
interface
0/1/
port
interface
0/2/
port
interface
0/3/
port
interface
0/0/
port
interface
0/1/
port
interface
0/2/
port
interface
0/3/
port
interface
0/0/
port
interface
0/1/
port
interface
0/2/
port
interface
0/3/
port
interface
0/0/
port
interface
0/1/
port
interface
0/2/
port
Double-Wide
HWIC interface
interface
0/1/
port
interface
0/3/
port
interface
0/1/
port
interface
0/3/
port
interface
0/1/
port
interface
0/3/
port
interface
0/1/
port