Datasheet

© 2006 Cisco Systems, Inc. All rights reserved.
Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.
Page 14 of 28
Q. What type of system Flash memory is used on Cisco 3800 Series?
A. The Cisco 3800 Series uses Compact Flash memory that conforms to the PC Card ATA specification with standard ATA register and command
sets. This replaces both the system Flash memory and the PCMCIA Flash memory used on other Cisco routers.
Q. How many Compact Flash memory slots are available on Cisco 3800 Series routers?
A. Only one external slot is provided on Cisco 3800 systems. It accepts both Type I and Type II devices, and allows for hot insertion and hot
removal.
Q. Which formats will be supported on the Cisco 3800 Series Compact Flash memory cards?
A. Both Class B low-end file system (LEFS) and Class C DOS (Cisco DOS) file systems are supported; Cisco DOS is the default.
Q. Can you partition the Compact Flash card?
A. No.
Q. Can you hot insert a Cisco 3800 Series Compact Flash card into the external slot without disrupting service?
A. Yes. You will get a console message when you insert or remove the Compact Flash card. If the CF LED is lit or blinking, do not remove
the Compact Flash memory card. The router might reload, or the Compact Flash memory card can be damaged.
SECURITY SUPPORT
Q. How do I enable the onboard crypto accelerator?
A. The following Cisco IOS security feature sets are needed to enable the crypto accelerator.
• Advanced Enterprise Services
• Advanced IP Services
• Advanced Security
Q. What features are supported by the onboard crypto accelerator?
A. The crypto accelerator supports IPSec DES, 3DES, and AES (128, 192, 256).
Q. Will the onboard crypto accelerator work in conjunction with the VPN encryption AIMs?
A. No. Once a VPN encryption AIM is installed, the onboard crypto module will no longer operate. IPSec will be processed through the
VPN encryption AIM.
Q. With the integrated crypto accelerator, is the Cisco 3800 Series under export control?
A. No. The export control depends on the Cisco IOS feature sets chosen. Cisco 3800 Series systems come default with IP Base software, which
does not enable the crypto accelerator and therefore is not under export control. If a Cisco IOS security feature set is ordered with the system, then
the export control guideline needs to be followed.
Q. Does the onboard crypto accelerator of 3800 process all encryption algorithms in hardware?
A. Yes but with a caveat. The simultaneous configuration/use of AH and ESP protocols causes the processing to shift to software only mode.
This applies to any combination of ESP & AH transform sets used.
e.g.
• ESP-3DES AH-SHA-HMAC
• ESP-3DES ESP-SHA-HMAC AH-SHA-HMAC
• ESP-AES AH-MD5-HMAC
• ESP-AES ESP-SHA-HMAC AH-MD5-HMAC