cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1257
Views
0
Helpful
2
Replies
ghias
Beginner

Encryption on Nexus 7k , Layer 3 p2p link

Hello Folks,

I am struggling to find out the possibility if i can make wire rate encryption run between the two Nexus7k switches on a Layer 3 point-to-point link.

Just simple AES encrytion on the layer 3 link.

Pls consider the Nexus 7k are enabled with the relevant security licenses etc.

If  this is possible can someonoe pls forward the working sample configuration?

thanks in advance,

Ghias

2 REPLIES 2

This one works for me:

interface ethernet 1/1

       
cts manual
  sap pmk 17A57EA11BE57BABE550F7B00B501E   modelist gcm-encrypt
  no propagate-sgt

cts manual
  sap pmk 6ADB630F907F19351B19285E276 modelist gcm-encrypt
  no propagate-sgt

Please note, the hex number is randomly generated, but has to be the same on both sides.

Cheers,

Hi -

Do you have any useful commands for verifying that CTS is working?

I have tried "show cts interface ex/y" but it's not very clear.

I would like to see some encrypt/decrypt counters ideally.

Thanks,

James

Content for Community-Ad
This widget could not be displayed.