<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:55" />
    <title>Enabling IPsec Using FCIP Wizard </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1756;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1136768"> </a><h1 class="pTitle">
Enabling IPsec Using FCIP Wizard

</h1>
<a name="wp1136769"> </a><p class="pBody">
DCNM-SAN simplifies the configuration of IPsec and IKE by enabling and configuring these features 
as part of the FCIP configuration using the FCIP Wizard.

</p>
<a name="wp1136770"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1136772"> </a><p class="pBody">
To enable IPsec using the FCIP Wizard, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1136774"> </a><li class="pSmartList1">Click the FCIP Wizard icon in the toolbar.
</li>
<a name="wp1136781"> </a><li class="pSmartList1">Choose the switches that act as end points for the FCIP link and click <span style="font-weight: bold">Next</span>.
</li>
<a name="wp1136782"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> These switches must have MPS-14/2 modules installed to configure IPsec on this FCIP link.

</p>
<a name="wp1136784"> </a><li class="pSmartList1">Choose the Gigabit Ethernet ports on each MPS-14/2 module that will form the FCIP link.
</li>
<a name="wp1136785"> </a><li class="pSmartList1">Check the <span style="font-weight: bold">Enforce IPSEC Security</span> check box and set IKE Auth Key. 
</li>
<a name="wp1136795"> </a><p class="pBodyRelative">

</p>
<a name="wp1136797"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Next</span>. In the Specify Tunnel Properties dialog box, you see the TCP connection characteristics.
</li>
<a name="wp1136798"> </a><li class="pSmartList1">Set the minimum and maximum bandwidth settings and round-trip time for the TCP connections on this 
FCIP link. Click the <span style="font-weight: bold">Measure</span> button to measure the round-trip time between the Gigabit Ethernet 
endpoints.
</li>
<a name="wp1136799"> </a><li class="pSmartList1">Check the <span style="font-weight: bold">Enable Write Acceleration</span> check box to enable FCIP write acceleration on this FCIP link.
</li>
<a name="wp1136800"> </a><li class="pSmartList1">Check the <span style="font-weight: bold">Enable Optimum Compression</span> check box to enable IP compression on this FCIP link. 
</li>
<a name="wp1136801"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Next</span> to configure the FCIP tunnel parameters.
</li>
<a name="wp1136802"> </a><li class="pSmartList1">Set the Port VSAN<span style="font-weight: bold"> </span>for nontrunk/auto and<span style="font-weight: bold"> </span>allowed VSAN list for the trunk tunnel. Choose a <span style="font-weight: bold">Trunk Mode</span> 
for this FCIP link. See the <span style="font-style: italic">IP Services Configuration Guide</span>, <span style="font-style: italic">Cisco DCNM for SAN</span>.
</li>
<a name="wp1136803"> </a><li class="pSmartList1">Click <span style="font-weight: bold">Finish</span> to create this FCIP link or click <span style="font-weight: bold">Cancel</span> to exit the FCIP Wizard without creating an FCIP 
link.
</li>
</ol></div>
<a name="wp1136805"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1136807"> </a><p class="pBody">
To verify that IPsec and IKE are enabled, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1136808"> </a><li class="pSmartList1">Expand<span style="font-weight: bold"> Switches &gt; Security </span>and then select <span style="font-weight: bold">IPSEC </span>in the Physical Attributes pane. 
</li>
<a name="wp1136809"> </a><li class="pSmartList1">The <span style="font-weight: bold">Control</span> tab is the default. Verify that the switches you want to modify for IPSec are enabled in the 
Status column.
</li>
<a name="wp1136810"> </a><li class="pSmartList1">Expand <span style="font-weight: bold">Switches &gt; Security, </span>and then select <span style="font-weight: bold">IKE </span>in the Physical Attributes pane. 
</li>
<a name="wp1136811"> </a><li class="pSmartList1">The <span style="font-weight: bold">Control</span> tab is the default. Verify that the switches you want to modify for IKE are enabled in the 
Status column.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
