[c-nsp] Disable cryptographic hardware on Cisco 3845

Rodney Dunn rodunn at cisco.com
Mon Jun 18 14:14:01 EDT 2007


Why do you want to turn it off?

We do no recommend that at all becuase the performance
is so much slower in the software path.

Please don't do it unless you are simply trying to
narrow down a bug.

Rodney


<snip>
3800-1#sh ver | incl IOS
Cisco IOS Software, 3800 Software (C3845-ADVIPSERVICESK9-M), Version 12.4(8), RELEASE SOFTWARE (fc1)
3800-1#config t
Enter configuration commands, one per line.  End with CNTL/Z.
3800-1(config)#no crypto engin acc 
...switching to SW crypto engine
3800-1(config)#
*Jun 18 18:23:00.418: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Disabled 
3800-1(config)# crypto engin acc   
...switching to HW crypto engine
3800-1(config)#
*Jun 18 18:23:07.694: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Enabled 
3800-1(config)#
</snip>

On Mon, Jun 18, 2007 at 09:43:57AM -0700, Joann Deng wrote:
> Hi group,
> 
> Anybody knows how to disable cryptographic hardware on
> Cisco 3845? As depending on configuration, either the
> internal Safenet chip or the IOS software is
> used for cryptographic operations on Cisco 3845, and
> I'd like to use IOS instead of the hardware.
> 
> Thanks in advance,
> 
> Joann
> 
> 
>        
> ____________________________________________________________________________________
> Got a little couch potato? 
> Check out fun summer activities for kids.
> http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&cs=bz 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list