ME-6524 chassis support for IPSec VPNs

Answered Question
Jan 2nd, 2010
User Badges:

I've tried establishing IPSec tunnels unsuccessfully.  Has anyone experienced the same issue?  Is it a software or hardware issue?

Correct Answer by Giuseppe Larosa about 7 years 2 months ago

Hello F,

I may be wrong but I don't think you have a chance to make IPSec working on the box. It is not listed in the data sheet and there is no HW for encryption it would rise the cpu usage to 100% with few traffic.


the presence of unsupported commands in IOS CLI can be seen as a defect. The CLI parser has not been customized correctly.


Hope to help

Giuseppe

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Giuseppe Larosa Sun, 01/03/2010 - 07:00
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Frobayo,

it should be an hardware problem: a cisco C6500 can install a service module for doing IPSec VPN but the ME 6524 has not possibility to install it.


see the datasheet:


http://www.cisco.com/en/US/partner/prod/collateral/switches/ps6568/ps6845/ps6846/product_data_sheet0900aecd8040657e.html


you can use it for MPLS VPN or for L2TPv3 not for IPsec


Hope to help

Giuseppe

frobayo Mon, 01/04/2010 - 12:22
User Badges:

Hi Giuseppe,


Thanks for your prompt response.  The odd thing is that the ME-6524 software is specific to this platform, which also have crypto commands available, but the functionality seems disabled.



#sho cryp engine conf


        crypto engine name:  Cisco VPN Software Implementation

        crypto engine type:  software

             serial number:  000021xxx

       crypto engine state:  installed

     crypto engine in slot:  N/A

                  platform:  Cisco Software Crypto Engine


   Crypto Adjacency Counts:

                Lock Count:  0

              Unlock Count:  0

        crypto lib version:  18.0.0


Any other suggestions/ideas for encrypting traffic using this platform?


Thanks,

F

Correct Answer
Giuseppe Larosa Mon, 01/04/2010 - 12:27
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello F,

I may be wrong but I don't think you have a chance to make IPSec working on the box. It is not listed in the data sheet and there is no HW for encryption it would rise the cpu usage to 100% with few traffic.


the presence of unsupported commands in IOS CLI can be seen as a defect. The CLI parser has not been customized correctly.


Hope to help

Giuseppe

Actions

This Discussion