> # IPsec Compatibility

> IPsec features are compatible with the following Cisco MDS 9000 Family hardware:

> - Cisco 18/4-port Multi-Service Module (MSM-18/4) modules and MDS 9222i Module-1 modules.
> - Cisco 14/2-port Multiprotocol Services (MPS-14/2) modules in Cisco MDS 9200 Switches or Cisco MDS 9500 Directors
> - Cisco MDS 9216i Switch with the 14/2-port multiprotocol capability in the integrated supervisor module. Refer to the Cisco MDS 9200 Series Hardware Installation Guide for more information on the Cisco MDS 9216i Switch.
> - The IPsec feature is not supported on the management interface.

> IPsec features are compatible with the following fabric setup:

> - Two connected Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release 2.0(1b) or later, or Cisco NX-OS Release 4.1(1).
> - A Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release 2.0(1b) or later, or Cisco NX-OS Release 4.1(1) connected to any IPsec compliant device.
> - The following features are not supported in the Cisco NX-OS implementation of the IPsec feature:
> - Authentication Header (AH)
> - Transport mode
> - Security association bundling
> - Manually configuring security associations
> - Per host security association option in a crypto map
> - Security association idle timeout
> - Dynamic crypto maps

> Note Any reference to crypto maps in this document, only refers to static crypto maps.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.