> # Enabling IPsec Using FCIP Wizard

> DCNM-SAN simplifies the configuration of IPsec and IKE by enabling and configuring these features as part of the FCIP configuration using the FCIP Wizard.

> ## Detailed Steps

> To enable IPsec using the FCIP Wizard, follow these steps:

> 1. Click the FCIP Wizard icon in the toolbar.
> 2. Choose the switches that act as end points for the FCIP link and click Next.

> Note These switches must have MPS-14/2 modules installed to configure IPsec on this FCIP link.

> 3. Choose the Gigabit Ethernet ports on each MPS-14/2 module that will form the FCIP link.
> 4. Check the Enforce IPSEC Security check box and set IKE Auth Key.

> 5. Click Next. In the Specify Tunnel Properties dialog box, you see the TCP connection characteristics.
> 6. Set the minimum and maximum bandwidth settings and round-trip time for the TCP connections on this FCIP link. Click the Measure button to measure the round-trip time between the Gigabit Ethernet endpoints.
> 7. Check the Enable Write Acceleration check box to enable FCIP write acceleration on this FCIP link.
> 8. Check the Enable Optimum Compression check box to enable IP compression on this FCIP link.
> 9. Click Next to configure the FCIP tunnel parameters.
> 10. Set the Port VSAN for nontrunk/auto and allowed VSAN list for the trunk tunnel. Choose a Trunk Mode for this FCIP link. See the IP Services Configuration Guide, Cisco DCNM for SAN.
> 11. Click Finish to create this FCIP link or click Cancel to exit the FCIP Wizard without creating an FCIP link.

> ## Detailed Steps

> To verify that IPsec and IKE are enabled, follow these steps:

> 1. Expand Switches > Security and then select IPSEC in the Physical Attributes pane.
> 2. The Control tab is the default. Verify that the switches you want to modify for IPSec are enabled in the Status column.
> 3. Expand Switches > Security, and then select IKE in the Physical Attributes pane.
> 4. The Control tab is the default. Verify that the switches you want to modify for IKE are enabled in the Status column.

> Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.