topic Re: 3660 Encryption AIM in Network Security https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141235#M1061080 <HTML><HEAD></HEAD><BODY><P>Thanx, I know this command, but i'm not sure about the output. From the first part (Encryption AIM in aim slot:) i should derive that it is ok, but from the part (EncryptionAIM0/13:) i have derived, that the AIM is not running. What do You think?</P><P></P><P>sh crypto eng accel stat</P><P>Encryption AIM in aim slot: 0</P><P> source limited; enabled</P><P> In Drops: 0 Out Drops: 2 Fast Sends: 2419869988</P><P> Up Calls: 2419869986 Tx disabled: 0 ifout drops: 0</P><P> Pkt Errs: 0 Pkts output: 2419869986 Bytes output: 3854887622</P><P> NULL Pkts: 0 No PKTS: 3082988493 &gt;16 parts: 0</P><P> Huge Pkts: 0 WQ Errs: 0 HP Defers: 0</P><P> Hold Queue Events</P><P> Repar fails: 0 Enq fails: 2 Entries: 000</P><P> Fallbacks: 0 Enqueues: 926361264 Dequeues: 926361264</P><P> Stat paks: 0 Repars: 926358411 pak free: 926383514</P><P> Kaos Hi Pri Tx: Enqueued: 2419869986 paks 3363347632 bytes</P><P> Dequeued: 0 paks 0 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Hi Pri Rx: Enqueued: 0 paks 0 bytes</P><P> Dequeued: 2419869986 paks 3448571092 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri Tx: Enqueued: 8712705 paks 168257683 bytes</P><P> Dequeued: 0 paks 0 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri Rx: Enqueued: 0 paks 0 bytes</P><P> Dequeued: 0 paks 0 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri MIPS Tx: Enqueued: 1815006 paks 143647923 bytes</P><P> Dequeued: 1815006 paks 136912187 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri MIPS Rx: Enqueued: 1815006 paks 65697111 bytes</P><P> Dequeued: 1815006 paks 65697111 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P></P><P>EncryptionAIM0/13:</P><P> ds: 0x61FE3498 idb:0x61FDF034</P><P> Statistics for Encryption Module:</P><P> 0 packets in 0 packets out</P><P> 0 paks/sec in 0 paks/sec out</P><P> 0 Kbits/sec in 0 Kbits/sec out</P><P> rx_no_endp: 0 rx_hi_discards: 0 fw_failure: 0</P><P> invalid_sa: 0 invalid_flow: 0 cgx_errors 0</P><P> fw_qs_filled: 0 fw_resource_lock:0 lotx_full_err: 0</P><P> null_ip_error: 0 pad_size_error: 0 out_bound_dh_acc: 0</P><P> esp_auth_fail: 0 ah_auth_failure: 0 crypto_pad_error: 0</P><P> ah_prot_absent: 0 ah_seq_failure: 0 ah_spi_failure: 0</P><P> esp_prot_absent:0 esp_seq_fail: 0 esp_spi_failure: 0</P><P> obound_sa_acc: 0 invalid_sa: 0 out_bound_sa_flow: 0</P><P> invalid_dh: 0 bad_keygroup: 0 out_of_memory: 0</P><P> no_sh_secret: 0 no_skeys: 0 invalid_cmd: 0</P><P> dsp_coproc_err: 0 comp_unsupported:0 pak_too_big: 0</P><P> pak_mp_length_spec_fault: 0</P><P> tx_lo_queue_size_max 0 cmd_unimplemented: 0</P><P> 4294967 seconds since last clear of counters</P><P> Interrupts: -2041009202 Immed: 3 HiPri ints: -2049428276</P><P> LoPri ints: 8712705 POST Errs: 0 Alerts: 1</P><P> Unk Cmds: 0 UnexpCmds: 0</P><P> cgx_cmd_pending:0 packet_loop_max: 0 packet_loop_limit: 0</P></BODY></HTML> Thu, 09 Jan 2003 15:16:05 GMT STEPAN JANKOVIC 2003-01-09T15:16:05Z 3660 Encryption AIM https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141233#M1061077 <P>Hello, I have suspiction (low performance), that my encryption aim is not running. If i type "show crypto engine accelerator brief" the output contains:</P><P>"</P><P> crypto engine name: unknown</P><P> crypto engine type: ISA/ISM</P><P>...</P><P> crypto engine name: unknown</P><P> crypto engine type: software</P><P> ...</P><P> crypto engine state: installed</P><P> crypto engine in slot: N/A</P><P>"</P><P>I am concerned about that "software" type.</P><P>When I try crypto engine accelerator command, the output is, that encryption is already enabled. Software is c3660-ik2o3s-mz.121-3a.XI5(have to be OK). Is any way to definitely recognize if the AIM is running? Thanks for any ideas. Steve</P> Fri, 21 Feb 2020 06:28:50 GMT https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141233#M1061077 STEPAN JANKOVIC 2020-02-21T06:28:50Z Re: 3660 Encryption AIM https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141234#M1061078 <HTML><HEAD></HEAD><BODY><P>Hi Steve,</P><P>you can type " sh cry eng acceler stat" to see if your encryption card is processing the packets ( i.e, encrypting or decrypting the packets )</P><P>Hope that helps</P><P>Jazib</P></BODY></HTML> Thu, 09 Jan 2003 15:01:02 GMT https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141234#M1061078 jfrahim 2003-01-09T15:01:02Z Re: 3660 Encryption AIM https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141235#M1061080 <HTML><HEAD></HEAD><BODY><P>Thanx, I know this command, but i'm not sure about the output. From the first part (Encryption AIM in aim slot:) i should derive that it is ok, but from the part (EncryptionAIM0/13:) i have derived, that the AIM is not running. What do You think?</P><P></P><P>sh crypto eng accel stat</P><P>Encryption AIM in aim slot: 0</P><P> source limited; enabled</P><P> In Drops: 0 Out Drops: 2 Fast Sends: 2419869988</P><P> Up Calls: 2419869986 Tx disabled: 0 ifout drops: 0</P><P> Pkt Errs: 0 Pkts output: 2419869986 Bytes output: 3854887622</P><P> NULL Pkts: 0 No PKTS: 3082988493 &gt;16 parts: 0</P><P> Huge Pkts: 0 WQ Errs: 0 HP Defers: 0</P><P> Hold Queue Events</P><P> Repar fails: 0 Enq fails: 2 Entries: 000</P><P> Fallbacks: 0 Enqueues: 926361264 Dequeues: 926361264</P><P> Stat paks: 0 Repars: 926358411 pak free: 926383514</P><P> Kaos Hi Pri Tx: Enqueued: 2419869986 paks 3363347632 bytes</P><P> Dequeued: 0 paks 0 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Hi Pri Rx: Enqueued: 0 paks 0 bytes</P><P> Dequeued: 2419869986 paks 3448571092 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri Tx: Enqueued: 8712705 paks 168257683 bytes</P><P> Dequeued: 0 paks 0 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri Rx: Enqueued: 0 paks 0 bytes</P><P> Dequeued: 0 paks 0 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri MIPS Tx: Enqueued: 1815006 paks 143647923 bytes</P><P> Dequeued: 1815006 paks 136912187 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P> Kaos Lo Pri MIPS Rx: Enqueued: 1815006 paks 65697111 bytes</P><P> Dequeued: 1815006 paks 65697111 bytes</P><P> Tx Disabled: 0 Ifout drops: 0 Partcnt err: 0</P><P> No bufs: 0 Errs: 0 Ringfull: 0</P><P> EnqFail: 0 many parts: 0 bad parts: 0</P><P></P><P>EncryptionAIM0/13:</P><P> ds: 0x61FE3498 idb:0x61FDF034</P><P> Statistics for Encryption Module:</P><P> 0 packets in 0 packets out</P><P> 0 paks/sec in 0 paks/sec out</P><P> 0 Kbits/sec in 0 Kbits/sec out</P><P> rx_no_endp: 0 rx_hi_discards: 0 fw_failure: 0</P><P> invalid_sa: 0 invalid_flow: 0 cgx_errors 0</P><P> fw_qs_filled: 0 fw_resource_lock:0 lotx_full_err: 0</P><P> null_ip_error: 0 pad_size_error: 0 out_bound_dh_acc: 0</P><P> esp_auth_fail: 0 ah_auth_failure: 0 crypto_pad_error: 0</P><P> ah_prot_absent: 0 ah_seq_failure: 0 ah_spi_failure: 0</P><P> esp_prot_absent:0 esp_seq_fail: 0 esp_spi_failure: 0</P><P> obound_sa_acc: 0 invalid_sa: 0 out_bound_sa_flow: 0</P><P> invalid_dh: 0 bad_keygroup: 0 out_of_memory: 0</P><P> no_sh_secret: 0 no_skeys: 0 invalid_cmd: 0</P><P> dsp_coproc_err: 0 comp_unsupported:0 pak_too_big: 0</P><P> pak_mp_length_spec_fault: 0</P><P> tx_lo_queue_size_max 0 cmd_unimplemented: 0</P><P> 4294967 seconds since last clear of counters</P><P> Interrupts: -2041009202 Immed: 3 HiPri ints: -2049428276</P><P> LoPri ints: 8712705 POST Errs: 0 Alerts: 1</P><P> Unk Cmds: 0 UnexpCmds: 0</P><P> cgx_cmd_pending:0 packet_loop_max: 0 packet_loop_limit: 0</P></BODY></HTML> Thu, 09 Jan 2003 15:16:05 GMT https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141235#M1061080 STEPAN JANKOVIC 2003-01-09T15:16:05Z Re: 3660 Encryption AIM https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141236#M1061083 <HTML><HEAD></HEAD><BODY><P>Can you please run:</P><P>SV3-9#sh cry engine config</P><P></P><P> crypto engine name: Virtual Private Network (VPN) Module</P><P> crypto engine type: hardware</P><P>if it is in software you will see the following:</P><P></P><P>SV3-9#sh cry engine config</P><P></P><P> crypto engine name: Virtual Private Network (VPN) Module</P><P> crypto engine type: software</P><P></P><P>Let me know if you have any problems running this command.</P><P>R/Catherine </P><P></P></BODY></HTML> Fri, 10 Jan 2003 11:38:48 GMT https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141236#M1061083 mclach 2003-01-10T11:38:48Z Re: 3660 Encryption AIM https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141237#M1061086 <HTML><HEAD></HEAD><BODY><P>Hello Catherine,</P><P>I have tried this before:</P><P>sh crypto engine config</P><P> crypto engine name: unknown</P><P> crypto engine type: ISA/ISM</P><P></P><P>From this output I suppose, that it stands for hardware encryption.</P><P>However, other diagnostic commands outputs are not clear enough. I give it up and believe in hardware encryption. </P><P>Thanks a lot.</P><P>Steve</P></BODY></HTML> Fri, 10 Jan 2003 12:12:44 GMT https://community.cisco.com/t5/network-security/3660-encryption-aim/m-p/141237#M1061086 STEPAN JANKOVIC 2003-01-10T12:12:44Z