Cisco Broadband Cable Command Reference Guide

show crypto engine configuration
Related Commands
5-138
Table 5-18 show crypto engine configuration Field Descriptions
Cisco Broadband Cable Command Reference Guide
Chapter 5 Cable CPE Commands
Field Description
crypto engine name Name of the crypto engine as assigned with the key-name
argument in the crypto key generate dss command. If no name
has been assigned, this field shows “unknown.”
crypto engine type Type of encryption engine running, always “ISA/ISM” and
“software” for the Cisco uBR905 and Cisco uBR925 cable
access routers.
hifn chip id, rev, and api rev Identifies the hardware accelerator, the revision of its onboard
firmware, and the revision of the software application layer.
Compression Identifies whether packets are compressed as well as encrypted.
3 DES Identifies whether Triple DES (3DES) 168-bit encryption is
supported.
Maximum buffer length Maximum size of the data buffer for each connection.
Maximum DH index, SA index, and Maximum size of each index that is supported per connection.
Flow index
Maximum RSA key size Maximum size of the RSA encryption key that is supported.
Lock Count Number of connections that have requested access to the crypto
engine and are waiting for processing time.
Unlock Count Number of connections that have finished encryption
processing and are waiting to release the crypto engine.
Tip In Cisco IOS Release 12.2(8)T and later releases, you can add a timestamp to show commands using the
exec prompt timestamp command in line configuration mode.
Command Description
clear crypto engine accelerator
counter
Resets the statistical and error counters for the hardware accelerator
to zero.
crypto ca Defines the parameters for the certification authority used for a
session.
crypto cisco Defines the encryption algorithms and other parameters for a
session.
crypto dynamic-map Creates a dynamic map crypto configuration for a session.
crypto engine accelerator Enables the use of the Cisco uBR905 and Cisco uBR925 router’s
onboard hardware accelerator for IPSec encryption.
crypto ipsec Defines the IPSec security associations and transformation sets.
crypto isakmp Enables and defines the IKE protocol and its parameters.
crypto key Generates and exchanges keys for a cryptographic session.
crypto map Creates and modifies a crypto map for a session.
debug crypto engine
accelerator control
Displays each control command as it is given to the crypto engine.
OL-1581-05