Re: [ A problem ]

[Dave Mitchell <dave@jnsnet.com>]

Siddharth,
  You do not need the ISM in order to use IKE/IPSec. The ISM
will just provide hardware based encryption to allow the main
proc to do what it is supposed to; route. But, IKE really doesn't
slam the processor except during rekeying or high traffic load, so
if you only have a small amount of tunnels performance should be okay.

You need to grab an export controlled copy of IOS with crypto
support in it. Im not sure what the laws are for high grade encryption
in India, so get the image that you can use legally.

Here's one image you can use that supports 56bit low grade crypto:
c7100-is56i-mz.121-9.bin  IP IPSEC 56

The crypto images usually have a `z` somewhere within the filename.

Here's your guide.
http://www.cisco.com/cgi-bin/Software/Iosplanner/Planner-tool/iosplanner.cgi?majorRel=12.1
  
Hope this helps.

-dave

On Mon, Jan 07, 2002 at 09:05:50PM +0530, Sri Siddhartha Kodali wrote:
> 
>  I am faced with a different kind of problem.our institute has purchased
>  cisco 7120 and 7140 routers to setup IPSEC tunnels.But the crypto module
>  is not present in the IOS.On doing drastic search we found that
>  Integrated Service Module is not present in slot 5.But we are confused
>  whether we do require ISM for using IPSEC and IKE 
> 
>  Cisco has mentioned in one of its manuals that ISM is a hardware
>  encryption module and reduces the load off the router.but we don't
>  find any crypto command to perform software encryption with the router
>  Could some one suggest me about this.The project is on total halt becoz
>  of this
> 
>  Thanking You,
> 
>  Siddharth Kodali
>  siddhu@bits-pilani.ac.in
>