Configuring ESP Settings

Note     To apply the SA to the ingress and egress hardware of an interface, the interface needs to be in the admin shut mode.

Note     The ESP modes are set only after a SA is configured to either the ingress or the egress hardware. If SA has not been configured, ESP is turned off and encapsulation does not occur.

Note     An ESP mode change always needs a port flap because the change is not seamless if it is done after you configure the port; although the configurations are not rejected.

Detailed Steps

To configure ESP settings, follow these steps:

  1. Expand Switches > Security, and then select FC-SP (DHCHAP).

    2. You see the FC-SP configuration in the Information pane.

  2. Click the ESP Interfaces tab.

    3. You see the Interface details for each switch.

  3. Click the Create Row icon.

    4. You see the Create ESP Interfaces dialog box.

  4. Select the switches on which you want to perform an encryption.
  5. Enter an interface for the selected switch.
  6. Select the appropriate ESP mode for the encryption.
  7. Enter the appropriate egress port for the encryption.
  8. Enter the appropriate ingress port for the encryption.
  9. Click Create to save the changes.

To configure ESP settings using Device Manager, follow these steps:

  1. Expand Switches > Security, and then select FC-SP.

    2. You see the FC-SP configuration dialog box.

  2. Click the ESP Interfaces tab.

    3. You see the Interface details for each switch.

  3. Click Create.

    4. You see the Create FC-SP ESP Interfaces dialog box.

  4. Enter an interace for any switch for encryption. Alternatively, you can select values from the available interfaces for the selected switch.
  5. Select the appropriate ESP mode for the encryption.
  6. Enter the appropriate egress port for the encryption.
  7. Enter the appropriate ingress port for the encryption.
  8. Click Create to save the changes.

Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.