Installation guide

3-19
Cisco IGX 8400 Series Installation Guide, Release 9.3.3 and Later Releases
OL-1165-06
Chapter 3 Installing the IGX
Installing a URM
Step 5 Insert the three metal screws into the holes in the encryption AIM. Tighten each screw with the flat-blade
screwdriver.
Step 6 Confirm that the encryption AIM is correctly installed, then continue with the “Configuring Internet
Encryption” section.
Configuring Internet Encryption
Note There are no commands specific to configuring the encryption hardware. Both software-based and
hardware-based encryption are configured in the same way. The system automatically detects the
presence of an encryption module at bootup and uses it to encrypt data; if no encryption hardware is
detected, software is used to encrypt data.
Whenever you install a new interface, or if you want to change the configuration of an existing interface,
you must configure the interface. If you replace a module that was already configured, the router
recognizes it and brings up the interface in the existing configuration.
Before you configure an interface, have the following information available:
• Protocols you plan to route on the new interface
• IP addresses, subnet masks, network numbers, zones, or other information related to the routing
protocol
• Static address mappings (address lists)
• Location and type of interface through which encrypted data will enter and exit the router
Timesaver Obtain this information from your system administrator or network plan before you begin router
configuration.
This section describes basic encryption configuration including:
• “Configuring Internet Key Exchange Security Protocol” section on page 3-20
• “Configuring IPSec Network Security” section on page 3-20
• “Checking the Configuration” section on page 3-21
For more information about configuring IPSec, see the “IP Security and Encryption” sections in
Cisco IOS software documentation (see the “Cisco IOS Software Documentation” section on page xix).
Note Depending on your own requirements and the protocols you plan to route, you might also need to enter
other configuration commands.