PATH=/ciscoview/Routershare/crypt/cry00000.htm TITLE=Displaying Chassis Level Encryption Information TEXT=Displaying Chassis Level Encryption Information The following encryption information is available about hardware and softwareencryption engines running on the router: Encryption Configuration Encryption Engine Status Table Encryption Connection Table
PATH=/ciscoview/Routershare/crypt/cry00001.htm TITLE=Encryption Configuration TEXT=Encryption Configuration The following encryption configuration information can be displayed: Configured algorithms(cieConfiguredAlgorithms) Encryption key timeout(cieEncryptionKeyTimeout) Number of encryption engines(cieNumberOfCryptoEngines) Number of connections(cieNumberOfConnections) Configured Algorithms(cieConfiguredAlgorithms) The type of configuration specified on this router. Supported algorithm types include: 56-bit DES with 64-bit cipher feedback 56-bit DES with 8-bit cipher feedback 40-bit DES with 64-bit cipher feedback 40-bit DES with 8-bit cipher feedback A single router can support more than one algorithm type at the same time. Encryption Key Timeout(cieEncryptionKeyTimeout) The interval (in minutes) after which keys expire for a session and must be renegotiated. Number of Encryption Engines(cieNumberOfCryptoEngines) The total number of encryption engines on this router. Number of Connections(cieNumberOfConnections) The total number of encrypted connections, including active, pending, and deadconnections.
PATH=/ciscoview/Routershare/crypt/cry00006.htm TITLE=Encryption Engine Status Table TEXT=Encryption Engine Status Table Provides the following essential identification and status information for each encryption engine: Engine ID(cieEngineID) Engine Card Number(cieEngineCardIndex) ESA Tampered With(cieEsaTampered) ESA Authenticated(cieEsaAuthenticated) ESA Mode(cieEsaMode) Engine Public Key(cieEnginePublicKey) Engine ID(cieEngineID) A value uniquely identifying an encryption engine. Software engines use the processor ID, the ESA card uses its own ID. Engine Card Number(cieEngineCardIndex) The card number of the ESA. A software engine uses the value 0 (zero). ESA Tampered With(cieEsaTampered) Indicates whether the ESA card has been tampered with. Software encryption engines do not provide this value. ESA Authenticated(cieEsaAuthenticated) Indicates whether or not this ESA card has been properly authenticated for this router. Software encryption engines do not provide this value. ESA Mode(cieEsaMode) The current operating mode of the ESA card, corresponding to the LED status shown on the ESA card. Software engines do not provide this value. Engine Public Key(cieEnginePublicKey) The public key that the particular engine uses.
PATH=/ciscoview/Routershare/crypt/cry00013.htm TITLE=Encryption Connection Table TEXT=Encryption Connection Table Provides the following status and statistics for each encryption connection: Connection index(cieConnIndex) Protected address(cieProtectedAddr) Unprotected address(cieUnprotectedAddr) Connection status(cieConnStatus) Packets encrypted(ciePktsEncrypted) Packets decrypted(ciePktsDecrypted) Packets dropped(ciePktsDropped) Local time established(cieLocalTimeEstablished) Algorithm type(cieAlgorithmType) Connection Index(cieConnIndex) A number identifying this encrypted connection. Protected Address(cieProtectedAddr) The IP address for protected mode (secure mode). Unprotected Address(cieUnprotectedAddr) The IP address of the unprotected node (the unsecure node) in the network. Connection Status(cieConnStatus) The current status or type of the encryption connection one of the following values is used: Pending connection Open connection Exchange keys Bad connection Pending and bad connections can be removed after 4 minutes of inactivity. An open (active) connections can be removed if the encryption timeout interval elapses with no traffic transmitted or received. Packets Encrypted(ciePktsEncrypted) The number of packets encrypted for this connection. Packets Decrypted(ciePktsDecrypted) The number of packets decrypted for this connection. Packets Dropped(ciePktsDropped) The number of packets dropped for this connection. Packets are dropped when the protected entity and the unprotected entity fail to establish encryption keys. If this value increases, verify that encryption keys are properly configured. Local Time Established(cieLocalTimeEstablished) The time at which the connection was established or reestablished, expressed as a value of system up time. Algorithm Type(cieAlgorithmType) The types of encryption algorithm used for this connection. Supportedalgorithm types include 56-bit DES with 64-bit cipher feedback 56-bit DES with 8-bit cipher feedback 40-bit DES with 64-bit cipher feedback 40-bit DES with 8-bit cipher feedback A single router can support more than one algorithm type at the same time.
