Chapter 1 Product Overview
IPSec VPN Acceleration Services Module (WS-SVC-IPSEC-1)
1-66
Catalyst 6500 Series Switch Module Installation Guide
78-15725-02
IPSec VPN Acceleration Services Module
(WS-SVC-IPSEC-1)
The IPSec VPN Acceleration Services module is a Gigabit Ethernet IPSec
cryptographic module that you can install in the Catalyst 6500 series switches.
(See Figure 1-44.) The VPN module provides bump-in-the-wire (BITW) IPSec
implementation using VLANs.
Note BITW is an IPSec implementation that starts egress packet processing after the IP
stack has finished with the packet, and completes ingress packet processing before
the IP stack receives the packet.
Note Specific combinations of supervisor engines and modules may not be supported
in your chassis. Refer to the release notes of the software version running on your
system for specific information on modules and supervisor engine combinations
that are not supported.
Figure 1-44 IPSec VPN Acceleration Services Module (WS-SVC-IPSEC-1)
Configuring VPNs using the VPN module is similar to configuring VPNs on
routers running Cisco IOS software. When you configure VPNs with the VPN
module, you attach crypto maps to VLANs (using interface VLANs); when you
configure VPNs on routers running Cisco IOS software, you configure individual
interfaces.
Note With the VPN module, crypto maps are still attached to individual interfaces,
but the set of interfaces allowed is restricted to “interface VLANs.”
STATUS
77113
STATUS LED
IPSec VPN Acceleration Services Module
WS-SVC-IPSEC-1