H3C Technologies H3C MSR 50 - Manual (Page 291)

5-1
5
ESM/VCPM/VPM
ESMs
Enhanced service module (ESM) is installed on a multi-service module (MSC). It supports IPsec and
hardware encryption/decryption and hashing operation by using hardware encryption expedites IP
packet encryption. Thus, the router can encrypt packets with high performance and reliability.
The encryption engine is optional. On a router installed with an encryption engine, the main control
board functions to route IP packets and implement encryption-enabled VPN, while the encryption
module functions to encrypt packets.
z
ANDE
z
SNDE
ANDE
Introduction
Advanced network data encryption engine (ANDE) supports IPsec and hardware expedited IP data
packet encryption, thus providing encryption with high performance and reliability.
z
Installed with an ANDE module, the main board of your router can implement VPN with encryption
provided by the ANDE module in addition to IP packet forwarding.
Interface attributes
The following table describes the interface attributes of the FIC-HNDE.
Table 5-1 Interface attributes of the ANDE module
Attribute Description
Protocol supported IPsec
IPsec concurrent tunnels 100 (implemented through software)
Hardware algorithm
key algorithm (DES, 3DES, AES, QC5, Blowfish, Cast-128 and
SkipJack)
Authentication algorithm (HMAC-MD5-96, HMAC-SHA-1-96)
Interface LEDs
There is no LED on the ANDE module. Display of the status of the module is implemented through the
ESM interface LED on the main board of the router.
The following table describes the LEDs on the panel.
Table 5-2 Description of the LEDs on the panel
LED Description
ESMx
z
Green: ANDE module is in the slot and is operating normally. Yellow: ANDE module is in
the slot but cannot be accessed by the router.