> # Configuring ESP Using ESP Wizard

> You can configure and set up link-level encryption between switches using ESP wizard. You can configure an existing Inter-Switch Link (ISL) as a secure ISL or edit an existing secure ingress SPI and egress SPI using this wizard.

> ## Detailed Steps

> To configure ESP using ESP wizard, follow these steps:

> 1. Right-click Tools > Security> FC-SP ESP Link Security to launch the ESP wizard from DCNM-SAN.
> 2. Select the appropriate ISL to secure or edit security.

> Note Only ISLs with FC-SP port mode turned on and available on ESP- capable switches or blades are displayed.

> 3. Create new Security Associations (SAs).

> You can create a new SA for each switch or use the existing SAs. You can click View Existing SA to view the existing SAs.

> Note The existing list of SAs displays all existing SAs for a switch. The wizard runs only when a pair of switches have a common SA. The wizard checks for this requirement when you select Next and a warning message is displayed if a pair of switches do not have a common SA. You must create a common SA on the pair of the switches to run this wizard.

> 4. Specify the Egress port, Ingress port, and ESP mode for the selected ISL.

> The Egress and Ingress ports are auto populated with SPIs of the SAs common to a pair of switches incase of a secured ISL.

> In this scenario, the mode is disabled and you cannot edit the modes for a secured ISL.

> Note You can modify an existing ESP configuration provided the selected ISLs are enabled.

> 5. Review your configuration.
> 6. Click Finish to start the configuration for the ESP setup. You can view the status of the configuration in the status column.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.