Cisco Broadband Cable Command Reference Guide

Chapter 5 Cable CPE Commands
Related Commands
OL-1581-05
Table 5-17 show crypto engine brief Field Descriptions
show crypto engine brief
Field Description
crypto engine name Name of the crypto engine as assigned with the key-name
argument in the crypto key generate dss command. If no name
has been assigned, this field shows “unknown.”
crypto engine type The type of encryption engine running, always “ISA/ISM” and
“software” for the Cisco uBR905 and Cisco uBR925 cable
access routers.
hifn chip id, rev, and api rev Identifies the hardware accelerator, the revision of its onboard
firmware, and the revision of the software application layer.
Compression Identifies whether packets are compressed as well as encrypted.
3DES Identifies whether Triple DES (3DES) 168-bit encryption is
supported.
crypto engine state The current run-time state of the crypto engine:
installed—Indicates that the crypto engine is present but is
not configured for encryption.
dss key generated—Indicates that the crypto engine has
DSS keys already generated.
crypto engine in slot The chassis slot number containing the crypto engine. This
field is always N/A for the Cisco uBR905 and Cisco uBR925
cable access routers because the engine is not in a slot but is
permanently onboard the routers.
Tip In Cisco IOS Release 12.2(8)T and later releases, you can add a timestamp to show commands using the
exec prompt timestamp command in line configuration mode.
Command Description
clear crypto engine accelerator
counter
Resets the statistical and error counters for the hardware accelerator
to zero.
crypto ca Defines the parameters for the certification authority used for a
session.
crypto cisco Defines the encryption algorithms and other parameters for a
session.
crypto dynamic-map Creates a dynamic map crypto configuration for a session.
crypto engine accelerator Enables the use of the Cisco uBR905 and Cisco uBR925 router’s
onboard hardware accelerator for IPSec encryption.
crypto ipsec Defines the IPSec security associations and transformation sets.
crypto isakmp Enables and defines the IKE protocol and its parameters.
crypto key Generates and exchanges keys for a cryptographic session.
crypto map Creates and modifies a crypto map for a session.
Cisco Broadband Cable Command Reference Guide
5-135