- Cisco Employee,
Author: Dan Hisaw
Telnet to the existing Netcrypt, and capture the output of the following commands:
(In the 3rd command, that’s “sl” as in “session list”). (Username: Netcrypt / Password: Netcrypt). When you’re done, exit out using Ctrl + ] then type “quit” at the “telnet” prompt.
If they’re just replacing a Netcrypt, it’s just like replacing a QAM except you have to change 5 MAC addresses. The only trick is that there’s a huge label on the bottom of the Netcrypt with 10 MAC addresses. They’ll need to get the 1st, 3rd, 4th, and 5th MAC address off the bottom of the unit BEFORE racking it. (There’s a picture of the label on page 2-5 in the attached document “Netcrypt Bulk Encryptor Hardware Installation and Operation Guide", P/N 4001444 Rev B.) These MAC addresses are labeled as follows:
MAC ETH A
MAC CH 0
MAC CH 1
MAC CH 2
MAC CH 3
Record these MAC addresses before you rack the Netcrypt. You may want to make a photo copy of the label before you rack the Netcrypt.
(NOTE: The newer labels may be 1-based; they might have changed it. In the DNCS GUI, the Ethernet Ports of the Netcrypt are definitely 1-based.)
Click the Netcrypt button in the admincon GUI. Select the radio button next to the Netcrypt you are swapping out. This is where you enter MAC ETH A which is the management port. Then in the Navigation Bar on the left, click “Ethernet Ports” This is where you enter the other 4 MAC addresses. These are the video ports of the Netcrypt.
Change the 5 MAC addresses in the Netcrypt GUI and save it. Then power on the new Netcrypt, and let it do bootp.
The “session” command that was captured at the beginning is similar to getting a session count off the front of a QAM before swapping it out, but Netcrypt does not have a front panel display.