Datasheet

DES/3DES/AES VPN Encryption Module (AIM-VPN/SSL-1, AIM-VPN/SSL-2, and AIM-VPN/SSL-3)

How to Configure the DES/3DES/AES VPN Encryption Module (AIM-VPN/SSL-1, AIM-VPN/SSL-2, and

Cisco IOS Security Configuration Guide

Determining Which Encryption Module to Use

Determine which VPN encryption module to use as described in Table 1.

How to Configure the DES/3DES/AES VPN Encryption Module

(AIM-VPN/SSL-1, AIM-VPN/SSL-2, and AIM-VPN/SSL-3)

There are no configuration tasks that are specific to the encryption hardware. Both software-based and

hardware-based encryption are configured in the same way. The system automatically detects the

presence of the encryption hardware at bootup and uses it to encrypt data. If no encryption hardware is

detected, software is used to encrypt data.

This section includes the following procedures:

• Disabling an AIM Encryption Module on a Specific Slot, page 3

• Reenabling an AIM Encryption Module on a Specific Slot, page 4

• Clearing the Statistical and Error Counters, page 5

• Verifying AIM-VPN/SSL-1, AIM-VPN/SSL-2, and AIM-VPN/SSL-3 Encryption Information,

page 5

Disabling an AIM Encryption Module on a Specific Slot

To disable an AIM encryption module on a specific slot, perform the following steps.

SUMMARY STEPS

1. enable

2. configure terminal

3. no crypto engine aim aim-slot-number

Table 1 AIM-VPN/SSL-1, AIM-VPN/SSL-2, and AIM-VPN/SSL-3 Encryption Module Support by

Cisco IOS Release

Platform Cisco IOS Release 12.4(9)T

Cisco 1841 AIM-VPN/SSL-1

Cisco 2691 AIM-VPN/SSL-2

Cisco 2801 AIM-VPN/SSL-2

Cisco 2811 AIM-VPN/SSL-2

Cisco 2821 AIM-VPN/SSL-2

Cisco 2851 AIM-VPN/SSL-2

Cisco 3725 AIM-VPN/SSL-3

Cisco 3745 AIM-VPN/SSL-3

Cisco 3825 AIM-VPN/SSL-3

Cisco 3845 AIM-VPN/SSL-3