Installation Guide

Table Of Contents
Total Keepalive Received : 10
Total Keepalive Transmitted: 10
IKEv2 Error Statistics:
Unsupported Payload : 0 Invalid IKE SPI : 0
Invalid Version : 0 Invalid Syntax : 0
Proposal Mismatch : 0 Invalid Selectors: 0
Authentication Failed : 0 Others : 0
IKEv2 Clear Commands
IKEv2 clear commands include clear ikev2 sa, clear ipsec statistics, clear ike statistics, and clear ipsec sa.
IKEv2 Option Description
clear ikev2 sa { fvrf
<vrf-name>
}
{ [ local
<ipaddress>
] | [ remote
<ip-address>
] }
Clear IKE security associations. When the user gives this command, the IKE SA will be deleted and re-established.
Each child SA is also re-established.
clear ipsec statistics Clears the IPsec statistics.
clear ike statistics Clears all IKE related stats.
clear ipsec sa [ fvrf
<vrf-name>
]
[ peer
<ip-address>
]
Clears IPsec SA. This command deletes and then creates the IPsec SA. The IKE SA will remain the same.
MLX-10GX4-IPSEC-M Forwarding
Card features for the MLX-10GX4-IPSEC-M include port to port line rate forwarding for all packet sizes, and line rate forwarding with
combinations of 1G, 10G, 100G and 40G ports.
The MLX-10GX4-IPSEC-M card is designed for the MLXe chassis, and its features include the following:
CAM1 and CAM3 interface parallel look-ups.
NOTE
Transparent to MLX-10GX4-IPSEC-M forwarding application.
P2010 free scale processor and security engine, with free scale processor running at 1.2Ghz; 4GB DDR3 SDRAM; 512K flash
memory boot code; and 64MB flash memory for application code.
4x1GE SFP and 4x10GE SFP+ ports.
Support for 6 temperature sensors and 32 GPIO.
NOTE
Long Term Repeat rate (LTR) exceeds fifty.
Support for 4x10G SFM (only with HSFM), which results in LP entering an interactive state.
2x100G XPP ILKN monitoring
The 2x100G XPP ILKN monitoring feature will monitor CRC errors in the Interlaken link / interface between XPP1 and XPP2 in 2 packet
processors for the 2x100G Ibzian card.
In 2x100G cards, CRC errors on the Interlaken link between iXPP1 and iXPP2 in the packet processor result in packet drops. The 2x100G
XPP ILKN monitoring feature will generate syslog and SNMP traps if software reads more than configured drops on ILKN links between
iXPP1 and iXPP2. Syslog and SNMP traps display the number of packet drops in the Interlaken interface and CRC errors in lane groups.
Two 100G ports are available. For each port:
One XPP (with two internal ingress XPPs, iXPP1, iXPP2, and an egress XPP) is present to perform packet processing. This
feature polls for Interlaken errors between ingress XPPs, iXPP1, and iXPP2.
Product Overview
Brocade NetIron MLXe Series Hardware Installation Guide
53-1004203-03 57