4000 Router Series Interface Module Guide

131

ESM/VCPM/VPM

ESMs

Enhanced service module (ESM) is installed on a multi-service module (MSC). It supports IPsec and

hardware encryption/decryption and hashing operation by using hardware encryption expedites IP

packet encryption. Thus, the router can encrypt packets with high performance and reliability.

The encryption engine is optional. On a router installed with an encryption engine, the main control

board functions to route IP packets and implement encryption-enabled VPN, while the encryption module

functions to encrypt packets.

• ESM-ANDE

• ESM-SNDE

ESM-ANDE

Introduction

Advanced network data encryption engine (ANDE) supports IPsec and hardware expedited IP data

packet encryption, thus providing encryption with high performance and reliability.

• Installed with an ESM-ANDE module, the main board of your router can implement VPN with

encryption provided by the ESM-ANDE module in addition to IP packet forwarding.

Interface attributes

Table 190 Interface attributes of the ESM-ANDE module

Attribute Description

Protocol supported IPsec

IPsec concurrent tunnels 100 (implemented through software)

Hardware algorithm

key algorithm (DES, 3DES, AES, QC5, Blowfish, Cast-128 and

SkipJack)

Authentication algorithm (HMAC-MD5-96, HMAC-SHA-1-96)

Interface LEDs

There is no LED on the ESM-ANDE module. Display of the status of the module is implemented through

the ESM interface LED on the main board of the router.

The following table describes the LEDs on the panel.

Table 191 Description for the LEDs on the panel

LED Descri

tion

ESMx

• Green: ANDE module is in the slot and is operating normally. Yellow: ANDE module is in

the slot but cannot be accessed by the router.