Specifications

Chapter 11 Configuring Encryption Services
Configuring the Encryption Service Adapter
11-2
Catalyst 4224 Access Gateway Switch Software Configuration Guide
OL-2031-02
Configuring the Encryption Service Adapter
Configuring the ESA requires four steps, as outlined below:
• Step 1: Configure the T1 Channel Group, page 11-2
• Step 2: Configure the Internet Key Exchange Security Protocol, page 11-3
• Step 3: Configure IPSec Network Security, page 11-5
• Step 4: Configure Encryption on the T1 Channel Group Serial Interface,
page 11-8
Step 1: Configure the T1 Channel Group
The first step toward configuring the ESA is to establish a T1 connection. You
must define the characteristics of a configuration group (such as speed and slot
number).
To configure the T1 channel group, follow this procedure:
Task Command
Step 1
Specify a controller and enter controller configuration
mode.
Gateway(config)# controller
{t1|e1}slot|port
Step 2
Specify the clock source for a link.
line specifies that the link uses the recovered clock
from the link and is the default setting. Generally, this
setting is most reliable.
internal specifies that the DS1 link uses the internal
clock.
loop-timed specifies that the T1 or E1 interface takes
the clock from the Rx (line) and uses it for Tx. This
setting decouples the controller clock from the
system-wide clock set with the network-clock-select
command.
Gateway(config-controller)#
clock source
{line|internal|loop-timed}
Step 3
Select frame clock.
Gateway(config-controller)#
frame-clock-select{priority}
{E1/T1} {slot/port}