Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Crypto Engine VRF Problem on a 7606 with SPA IPSEC

Hi All,

We just installed a new IPSEC SPA Card into a Cisco 7606 in order to enable the VRF Mode.

The problem we are phasing is that although we changed engine mode "crypto engine mode vrf" for the 7606, under the interface VLAN and Outside interface commands "crypto engine slot slot/subslot inside" and "crypto engine slot <slot/subslot> outside" do not exist. Only the "crypto engine slot slot|subslot <slot/subslot>" command exists which is used in the case of Crypto-Connect Mode of the crypto engine!!!

We erased all configuration, followed the steps descriped under "http://www.cisco.com/en/US/products/hw/routers/ps368/module_installation_and_configuration_guides_chapter09186a00806c29b1.html#wp2454344" but still problem remains. Any ideas?

1 REPLY
New Member

Re: Crypto Engine VRF Problem on a 7606 with SPA IPSEC

Hi All,

Just for your reference, although command does not exist, it does work fine with the "crypto engine slot slot|subslot "

i.e.

!Global Interface (Connected to Internet)

interface ATM1/0/0.222 point-to-point

ip address XXX.XXX.XXX.XXX 255.255.255.252

no ip proxy-arp

crypto engine subslot 3/0

Vlan 10

name VRF_TEST

interface Vlan10

ip vrf forwarding CUST-A

! Use An address from the Range of Destination Network

ip address 10.2.1.254 255.255.255.0

crypto map MAP_NAME

crypto engine subslot 3/0

Always Remeber to Create the VLAN First!!! It took us some hours troubleshooting without forwarding traffic.

595
Views
0
Helpful
1
Replies
CreatePlease to create content