Specifications
Chapter2 Configuring Security Features
Configuring IP Security
2-4
Cisco 1700 Series Router Software Configuration Guide
78-5407-03
To reenable the VPN module, use the following command:
crypto engine accelerator
For example:
Router(config)#crypto engine accelerator
Warning! all current connections will be torn down.
Do you want to continue? [yes|no]:yes
.
switching to crypto accelerator.
The following is a useful command that shows statistical information about the
VPN module:
show crypto engine accelerator statistic
For example:
Router#show crypto engine accelerator statistic
C1700_EM:
ds: 0x81784BA4 idb:0x81780560
Statistics for Virtual Private Network (VPN) Module:
0 packets in 0 packets out
0 paks/sec in 0 paks/sec out
0 Kbits/sec in 0 Kbits/sec out
rx_no_endp: 0 rx_hi_discards: 0 fw_failure: 0
invalid_sa: 0 invalid_flow: 0 cgx_errors 0
fw_qs_filled: 0 fw_resource_lock:0 lotx_full_err: 0
null_ip_error: 0 pad_size_error: 0 out_bound_dh_acc: 0
esp_auth_fail: 0 ah_auth_failure: 0 crypto_pad_error: 0
ah_prot_absent: 0 ah_seq_failure: 0 ah_spi_failure: 0
esp_prot_absent:0 esp_seq_fail: 0 esp_spi_failure: 0
obound_sa_acc: 0 invalid_sa: 0 out_bound_sa_flow: 0
invalid_dh: 0 bad_keygroup: 0 out_of_memory: 0
no_sh_secret: 0 no_skeys: 0 invalid_cmd: 0
dsp_coproc_err: 0 comp_unsupported:0 pak_too_big: 0
pak_mp_length_spec_fault: 0
tx_lo_queue_size_max 0 cmd_unimplemented: 0
159405 seconds since last clear of counters
Interrupts: Notify = 0, Reflected = 0, Spurious = 0
cgx_cmd_pending:0 packet_loop_max: 0 packet_loop_limit: 512
The show crypto engine accelerator statistic command can also be used as
follows to verify that the VPN module is disabled.
For example:
Router#show crypto engine accelerator statistic
There is no crypto accelerator.