Login
- Table of Contents
-
- 10-Security Configuration Guide
- 00-Preface
- 01-AAA configuration
- 02-802.1X configuration
- 03-MAC authentication configuration
- 04-Portal configuration
- 05-Web authentication configuration
- 06-Triple authentication configuration
- 07-Port security configuration
- 08-Password control configuration
- 09-Keychain configuration
- 10-Public key management
- 11-PKI configuration
- 12-IPsec configuration
- 13-SSH configuration
- 14-SSL configuration
- 15-Object group configuration
- 16-Attack detection and prevention configuration
- 17-TCP attack prevention configuration
- 18-IP source guard configuration
- 19-ARP attack protection configuration
- 20-ND attack defense configuration
- 21-uRPF configuration
- 22-MFF configuration
- 23-FIPS configuration
- 24-MACsec configuration
- 25-802.1X client configuration
- 26-Microsegmentation configuration
- 27-SAVA configuration
- 28-IP-SGT mapping configuration
- 29-Crypto engine configuration
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 29-Crypto engine configuration | 40.93 KB |
Configuring crypto engines
About crypto engines
Crypto engines encrypt and decrypt data for service modules.
The device supports only one software crypto engine, which is a set of software encryption algorithms. The software crypto engine is always enabled.
When a service module requires data encryption/decryption, it sends the desired data to the crypto engine. After the crypto engine completes data encryption/decryption, it sends the data back to the service module.
Display and maintenance commands for crypto engines
Execute display commands in any view and reset commands in user view.
|
Task |
Command |
|
Display crypto engine information. |
display crypto-engine |
|
Display crypto engine statistics. |
In standalone mode: display crypto-engine statistics [ engine-id engine-id slot slot-number ] In IRF mode: display crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number ] |
|
Clear crypto engine statistics. |
In standalone mode: reset crypto-engine statistics [ engine-id engine-id slot slot-number ] In IRF mode: reset crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number ] |
