我收到一条警报,指出加密引擎“已死”。我做了一些挖掘,并能够找到一些输出来验证这一点:
#sh crypto eng config
crypto engine name: Virtual Private Network (VPN) Module
crypto engine type: hardware
State: Enabled
Location: onboard 0
Product Name: Onboard-VPN
FW Version: 1
Time running: 2868294 seconds
Compression: Yes
DES: Yes
3 DES: Yes
AES CBC: Yes (128,192,256)
AES CNTR: No
Maximum buffer length: 4096
Maximum DH index: 0000
Maximum SA index: 0000
Maximum Flow index: 8000
Maximum RSA key size: 0000
crypto engine name: Virtual Private Network (VPN) Module
crypto engine type: hardware
State: Disabled
Location: slot 0
Product Name: ISM VPN Accelerator
UBOOT Ver : U-Boot 1.1.1 - ISRG2-Crypto-Engine - Version 2.7 (Build time: Mar 7 2011 - 09:12:23)
Firmware Ver: User: ssafari - View/Label: REVENTON_FW_COMMIT_IOS_12022013 - Date: Dec 2 2013 - Time: 16:18:14
HW State : DEAD
Compression: No
DES: Yes
3 DES: Yes
AES CBC: Yes (128,192,256)
AES CNTR: No
Maximum buffer length: 4096
Maximum DH index: 5120
Maximum SA index: 5120
Maximum Flow index: 10230
Maximum RSA key size: 2048
crypto lib version: 22_421.0.0
crypto lib version: 22_421.0.0
我不熟悉这个输出在说什么。VPN Module 是不是像插在路由器上的线卡一样可以更换?HW State: DEAD 是否表示卡坏了需要更换?我可以使用哪些其他 show 命令来验证此输出的含义?