The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the general equipment, safety, and site preparation requirements for installing the Service Adapter VPN Acceleration Module 2 (SA-VAM2). This chapter contains the following sections:
•Hardware and Software Requirements
•Compliance with U.S. Export Laws and Regulations Regarding Encryption
You need the following tools and parts to install a SA-VAM2. If you need additional equipment, contact a service representative for ordering information.
•SA-VAM2
•Number 2 Phillips screwdriver
•Your own electrostatic discharge (ESD)-prevention equipment or the disposable grounding wrist strap included with all upgrade kits, field-replaceable units (FRUs), and spares
•Antistatic mat
•Antistatic container
•Grounding wrist strap
•(Optional) Port Adapter Jacket Card for installation of a port adapter in the I/O controller slot of Cisco 7200VXR routers with a NPE-G1 processor only
This section describes the minimum software and hardware requirements for the SA-VAM2:
•Interoperability Between ISA, SA-VAM, and SA-VAM2
Specific hardware prerequisites that ensure proper operation of the SA-VAM2 follow:
•The SA-VAM2 on the Cisco 7200VXR routers requires a network processing engine 225 (NPE-225), 400 (NPE-400), or G1 (NPE-G1).
•The Cisco 7200VXR routers support up to two SA-VAM2s.
•The Cisco 7301 router supports a single SA-VAM2 in the port adapter slot.
•(Optional) SA-VAM2 is only supported in a Port Adapter Jacket Card on Cisco 7200VXR routers with an NPE-G1 processor. See the Port Adapter Jacket Card Installation Guide for more information about the Port Adapter Jacket Card.
Table 2-1 lists the recommended minimum Cisco IOS software release required to use the SA-VAM2 in supported router or switch platforms. Use the show version command to display the system software version that is currently loaded and running.
|
|
---|---|
Cisco 7200VXR router |
Cisco IOS Release 12.3(1)M or a later release of Cisco IOS Release 12.3M Cisco IOS Release 12.3(2)T1 or a later release of Cisco IOS Release 12.3T1 |
Cisco 7301 router |
Cisco IOS Release 12.3(3)M or a later release of Cisco IOS Release 12.3M Cisco IOS Release 12.3(2)T1 or a later release of Cisco IOS Release 12.3T1 |
(Optional) Cisco 7200VXR Router with the Port Adapter Jacket Card |
Cisco IOS Release 12.4(6)T or later release of Cisco IOS Release 12.4T Cisco IOS Release 12.4(7) or later release of Cisco IOS Release 12.4M Note Available only on the Cisco 7200VXR router with the NPE-G1 processor. |
1 The Cisco IOS Release 12.2(14)SU is no longer available for sale. |
To check the minimum software requirements of Cisco IOS software with the hardware installed on your router, Cisco maintains the Software Advisor tool on Cisco.com. Registered Cisco Direct users can access the Software Advisor at: http://www.cisco.com/cgi-bin/Support/CompNav/Index.pl. This tool does not verify whether modules within a system are compatible, but it does provide the minimum Cisco IOS software requirements for individual hardware modules or components.
Note Access to this tool is limited to users with Cisco.com login accounts.
The SA-VAM2 has the following restrictions:
•SA-VAM2 does not interoperate with other crypto cards, such as ISA, VAM, or SA-VAM2, in a single Cisco 7204VXR or Cisco 7206VXR. See "Interoperability Between ISA, SA-VAM, and SA-VAM2" section.
•The Cisco 7301 router only supports a single port adapter.
•Dual SA-VAM2 cards are only supported on the Cisco 7200VXR routers with the NPE-G1 processor.
•For routers using SA-VAM2, we recommend a minimum configuration of 256 MB of memory; for more efficient performance, we recommend 512 MB of memory.
•(Optional) SA-VAM2 is only supported in a Port Adapter Jacket Card on Cisco 7200VXR routers with an NPE-G1 processor. See the Port Adapter Jacket Card Installation Guide for more information about the Port Adapter Jacket Card.
Note The integrated services adapter (ISA) is the predecessor of the SA-VAM, and is end-of-sale as of April 15, 2004.
Table 2-2 describes the interoperability between ISA, SA-VAM, and SA-VAM2. You can use SA-VAM2 with ISA or with SA-VAM, provided you observe the following conditions:
•The Cisco 7200VXR routers support two SA-VAM2s in the same chassis. If one SA-VAM2 is enabled at system bootup, and a second SA-VAM2 is added later, the second SA-VAM2 becomes active immediately, and depending on the configuration, the system attempts to load-balance between the two SA-VAM2s.
•If SA-VAM and SA-VAM2 are in the chassis at system bootup, the Cisco 7200VXR router supports the newer version, in this case,SA-VAM2, provided the Cisco IOS Release supports SA-VAM2; and the SA-VAM remains inactive.
•If ISA and SA-VAM2 are in the chassis at system bootup, and the encryption mppe command is in the running configuration of the router, then both ISA/ISM and SA-VAM2 are enabled at system bootup. The ISA/ISM card supports MPPE, and the SA-VAM2 supports ISAKMP/IPSec. You can enable encryption mppe by following the steps in "Configuring IPSec" section. To disable MPPE on an ISA card, use the no encryption mppe command. This disables the ISA.
•To disable a card, use the no crypto engine accelerator type slot/port (port-adapter-slot-number/ interface-port-number) command.
|
|
|
---|---|---|
•Supports MPPE |
•Does not support MPPE |
•Does not support MPPE |
•Supports ISAKMP/IPSec |
•Supports ISAKMP/IPSec |
•Supports ISAKMP/IPSec |
•If ISA and SA-VAM2 are enabled in the chassis at power up, ISA is used for MPPE, and SA-VAM2 is used for ISAKMP/IPSec, provided the router's running configuration includes the encryption mppe command |
•If SA-VAM2 and SA-VAM are in the chassis at power up, the router supports SA-VAM2, and SA-VAM remains inactive |
•If SA-VAM2 and SA-VAM2 are enabled in the chassis at power up, the router supports both |
•If ISA is enabled in the chassis at bootup, and SA-VAM2 is added later, the SA-VAM2 remains inactive until the next reboot, or until the configuration is changed to enable the SA-VAM2 |
•If SA-VAM is enabled in the chassis at bootup, and SA-VAM2 is added later, the SA-VAM2 remains inactive until the next reboot, or until the configuration is changed to enable the SA-VAM2 |
•If SA-VAM2 is enabled in the chassis at bootup, and another SA-VAM2 is added later, the second SA-VAM2 immediately becomes active and depending on the configuration, the system attempts to load-balance between the two SA-VAM2s |
1 The ISA is end-of-sale as of April 15, 2004. |
This section provides safety guidelines that you should follow when working with any equipment that connects to electrical power or telephone wiring. This section includes the following topics:
•Electrical Equipment Guidelines
•Preventing Electrostatic Discharge Damage
Safety warnings appear throughout this publication in procedures that, if performed incorrectly, might harm you. A warning symbol precedes each warning statement.
Warning Ultimate disposal of this product should be handled according to all national laws and regulations.
Warning Hazardous voltage or energy is present on the backplane when the system is operating. Use caution when servicing.
Warning Blank faceplates and cover panels serve three important functions: they prevent exposure to hazardous voltages and currents inside the chassis; they contain electromagnetic interference (EMI) that might disrupt other equipment; and they direct the flow of cooling air through the chassis. Do not operate the system unless all cards, faceplates, front covers, and rear covers are in place.
Follow these basic guidelines when working with any electrical equipment:
•Before beginning any procedures requiring access to the chassis interior, locate the emergency power-off switch for the room in which you are working.
•Disconnect all power and external cables before moving a chassis; do not work alone when potentially hazardous conditions exist.
•Never assume that power has been disconnected from a circuit; always check.
•Do not perform any action that creates a potential hazard to people or makes the equipment unsafe; carefully examine your work area for possible hazards such as moist floors, ungrounded power extension cables, and missing safety grounds.
Electrostatic discharge (ESD) damage, which can occur when electronic cards or components are improperly handled, results in complete or intermittent failures. Port adapters and processor modules comprise printed circuit boards that are fixed in metal carriers. Electromagnetic interference (EMI) shielding and connectors are integral components of the carrier. Although the metal carrier helps to protect the board from ESD, use a preventive antistatic strap during handling.
Following are guidelines for preventing ESD damage:
•Always use an ESD wrist or ankle strap and ensure that it makes good skin contact.
•Connect the equipment end of the strap to an unfinished chassis surface.
•When installing a component, use any available ejector levers or captive installation screws to properly seat the bus connectors in the backplane or midplane. These devices prevent accidental removal, provide proper grounding for the system, and help to ensure that bus connectors are properly seated.
•When removing a component, use any available ejector levers or captive installation screws to release the bus connectors from the backplane or midplane.
•Handle carriers by available handles or edges only; avoid touching the printed circuit boards or connectors.
•Place a removed board component-side-up on an antistatic surface or in a static shielding container. If you plan to return the component to the factory, immediately place it in a static shielding container.
•Avoid contact between the printed circuit boards and clothing. The wrist strap only protects components from ESD voltages on the body; ESD voltages on clothing can still cause damage.
•Never attempt to remove the printed circuit board from the metal carrier.
•For safety, periodically check the resistance value of the antistatic strap. The measurement should be between 1 and 10 Mohm.
This product performs encryption and is regulated for export by the U.S. government. Persons exporting any item out of the United States by either physical or electronic means must comply with the Export Administration Regulations as administered by the U.S. Department of Commerce, Bureau of Export Administration. See http://www.bxa.doc.gov/ for more information.
Certain "strong" encryption items can be exported outside the United States depending upon the destination, end user, and end use. See http://www.cisco.com/wwl/export/encrypt.html for more information about Cisco-eligible products, destinations, end users, and end uses.
Check local country laws prior to export to determine import and usage requirements as necessary. See http://cwis.kub.nl/~frw/people/koops/lawsurvy.htm as one possible, unofficial source of international encryption laws.