HPE FlexNetwork MSR Series - Esm;Vcpm;Vpm; Esms; Esm-Ande

138
ESM/VCPM/VPM
ESMs
Enhanced service module (ESM) is installed on a multi-service module (MSC). It supports IPsec and
hardware encryption and decryption and hashing operation to provide high performance and
reliability encryption features.
The encryption engine is optional. On a router installed with an encryption engine, the MPU routes IP
packets and implements encryption-enabled VPN, while the encryption module encrypts packets.
• ESM-ANDE
• ESM-SNDE
ESM-ANDE
Introduction
When installed with an ESM-ANDE module, the main board of your router can implement VPN with
encryption provided by the ESM-ANDE module in addition to IP packet forwarding.
Interface specifications
Table 222 Interface specifications
Item
Specification
Protocol supported IPsec
IPsec concurrent tunnels 100 (implemented through software)
Hardware algorithm
key algorithm (DES, 3DES, AES, QC5, Blowfish, Cast-128 and
SkipJack)
Authentication algorithm (HMAC-MD5-96, HMAC-SHA-1-96)
Interface LEDs
The MPU on the router provides an ESM interface LED to indicate the status of the ESM-ANDE
module.
Table 223 LED description
LED
Description
ESMx
• Green: The ANDE module is in the slot and is operating correctly.
• Yellow: The ANDE module is in the slot but cannot be accessed by the router.
Note:
x means the number of the slot the ESM LED is in.
Installing and removing an ESM-ANDE module
For more information about installing and removing an ESM-ANDE module, see the installation
guides for the HPE MSR router models.