<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:53" />
    <title>Configuring ESP Using ESP Wizard </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1690;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1097948"> </a><h1 class="pTitle">
Configuring ESP Using ESP Wizard

</h1>
<a name="wp1097949"> </a><p class="pBody">
You can configure and set up link-level encryption between switches using ESP wizard. You can 
configure an existing Inter-Switch Link (ISL) as a secure ISL or edit an existing secure ingress SPI and 
egress SPI using this wizard.

</p>
<a name="wp1097950"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1097951"> </a><p class="pBody">
To configure ESP using ESP wizard, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1097952"> </a><li class="pSmartList1">Right-click <span style="font-weight: bold">Tools &gt; Security&gt; FC-SP ESP Link Security </span>to launch the ESP wizard from DCNM-SAN.
</li>
<a name="wp1097953"> </a><li class="pSmartList1">Select the appropriate ISL to secure or edit security. 
</li>
<a name="wp1090020"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> Only ISLs with FC-SP port mode turned on and available on ESP- capable switches or blades 
are displayed.

</p>
<a name="wp1097958"> </a><p class="pBodyRelative">

</p>
<a name="wp1097959"> </a><li class="pSmartList1">Create new Security Associations (SAs). 
</li>
<a name="wp1097960"> </a><p class="pListBodyLevel1">
You can create a new SA for each switch or use the existing SAs. You can click <span style="font-weight: bold">View Existing SA</span> to 
view the existing SAs.

</p>
<a name="wp1097961"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> The existing list of SAs displays all existing SAs for a switch. The wizard runs only when a pair 
of switches have a common SA. The wizard checks for this requirement when you select <span style="font-weight: bold">Next</span> 
and a warning message is displayed if a pair of switches do not have a common SA. You must 
create a common SA on the pair of the switches to run this wizard.

</p>
<a name="wp1097962"> </a><li class="pSmartList1">Specify the Egress port, Ingress port, and ESP mode for the selected ISL.
</li>
<a name="wp1097963"> </a><p class="pListBodyLevel1">
The Egress and Ingress ports are auto populated with SPIs of the SAs common to a pair of switches 
incase of a secured ISL.

</p>
<a name="wp1099814"> </a><p class="pListBodyLevel1">
In this scenario, the mode is disabled and you cannot edit the modes for a secured ISL.

</p>
<a name="wp1090250"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> You can modify an existing ESP configuration provided the selected ISLs are enabled.

</p>
<a name="wp1097969"> </a><li class="pSmartList1">Review your configuration.
</li>
<a name="wp1097970"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Finish</span> to start the configuration for the ESP setup. You can view the status of the configuration in 
the status column.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
