> # Configuring ESP Settings

> Note To apply the SA to the ingress and egress hardware of an interface, the interface needs to be in the admin shut mode.

> Note The ESP modes are set only after a SA is configured to either the ingress or the egress hardware. If SA has not been configured, ESP is turned off and encapsulation does not occur.

> Note An ESP mode change always needs a port flap because the change is not seamless if it is done after you configure the port; although the configurations are not rejected.

> ## Detailed Steps

> To configure ESP settings, follow these steps:

> 1. Expand Switches > Security, and then select FC-SP (DHCHAP).

> You see the FC-SP configuration in the Information pane.

> 2. Click the ESP Interfaces tab.

> You see the Interface details for each switch.

> 3. Click the Create Row icon.

> You see the Create ESP Interfaces dialog box.

> 4. Select the switches on which you want to perform an encryption.
> 5. Enter an interface for the selected switch.
> 6. Select the appropriate ESP mode for the encryption.
> 7. Enter the appropriate egress port for the encryption.
> 8. Enter the appropriate ingress port for the encryption.
> 9. Click Create to save the changes.

> To configure ESP settings using Device Manager, follow these steps:

> 1. Expand Switches > Security, and then select FC-SP.

> You see the FC-SP configuration dialog box.

> 2. Click the ESP Interfaces tab.

> You see the Interface details for each switch.

> 3. Click Create.

> You see the Create FC-SP ESP Interfaces dialog box.

> 4. Enter an interace for any switch for encryption. Alternatively, you can select values from the available interfaces for the selected switch.
> 5. Select the appropriate ESP mode for the encryption.
> 6. Enter the appropriate egress port for the encryption.
> 7. Enter the appropriate ingress port for the encryption.
> 8. Click Create to save the changes.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.