- Index
- Preface
- Using Cisco IOS Software
- SIP, SSC, and SPA Product Overview
-
- Overview of the IPsec VPN SPA
- Configuring VPNs in Crypto-Connect Mode
- Configuring VPNs in VRF Mode
- Configuring IPsec VPN Fragmentation and MTU
- Configuring IKE Features Using the IPsec VPN SPA
- Configuring Enhanced IPsec Features Using the IPsec VPN SPA
- Configuring PKI Using the IPsec VPN SPA
- Configuring Advanced VPNs Using the IPsec VPN SPA
- Configuring Duplicate Hardware and IPsec Failover Using the IPsec VPN SPA
- Configuring Monitoring and Accounting for the IPsec VPN SPA
- Troubleshooting the IPsec VPN SPA
- Glossary
SIP, SSC, and SPA Product Overview
This chapter provides an introduction to SPA interface processors (SIPs), SPA services cards (SSCs), and shared port adapters (SPAs). It includes the following sections:
•
Introduction to SIPs, SSCs, and SPAs
•SIP, SSC, and SPA Compatibility
For more hardware details for the specific SIPs, SSCs, and SPAs that are supported on the Catalyst 6500 Series switch, refer to the companion publication, Cisco 7600 Series Router SIP, SSC, and SPA Hardware Installation Guide.
Introduction to SIPs, SSCs, and SPAs
SIPs, SSCs, and SPAs are a new carrier card and port adapter architecture to increase modularity, flexibility, and density across Cisco Systems switches for network connectivity. This section describes the SIPs, SSCs, and SPAs and provides some guidelines for their use.
SPA Interface Processors
The following list describes some of the general characteristics of a SIP:
•A SIP is a carrier card that inserts into a switch slot like a line card. It provides no network connectivity on its own.
•A SIP contains one or more subslots, which are used to house one or more SPAs. The SPA provides interface ports for network connectivity.
•During normal operation the SIP should reside in the switch fully populated either with functional SPAs in all subslots, or with a blank filler plate (SPA-BLANK=) inserted in all empty subslots.
•SIPs support online insertion and removal (OIR) with SPAs inserted in their subslots. SPAs also support OIR and can be inserted or removed independently from the SIP.
SPA Services Cards
The following list describes some of the general characteristics of an SSC:
•An SSC is a carrier card that inserts into a switch slot like a line card. It provides no network connectivity.
•An SSC provides one or more subslots, which are used to house one or more SPAs. The supported SPAs do not provide interface ports for network connectivity, but provide certain services.
•During normal operation the SSC should reside in the switch fully populated either with functional SPAs in all subslots, or with a blank filler plate (SPA-BLANK=) inserted in all empty subslots.
•SSCs support online insertion and removal (OIR) with SPAs inserted in their subslots. SPAs also support OIR and can be inserted or removed independently from the SSC.
Shared Port Adapters
The following list describes some of the general characteristics of a SPA:
•A SPA is a modular type of port adapter that inserts into a subslot of a compatible SIP carrier card to provide network connectivity and increased interface port density. A SIP can hold one or more SPAs, depending on the SIP type.
•Some SPAs provide services rather than network connectivity, and insert into subslots of compatible SSCs. For example, the IPsec VPN SPA provides services such as IP security (IPsec) encryption/decryption, generic routing encapsulation (GRE), and Internet Key Exchange (IKE) key generation.
•SPAs are available in the following sizes, as shown in Figure 2-1 and Figure 2-2:
–Single-height SPA—Inserts into one SIP subslot.
–Double-height SPA—Inserts into two single, vertically aligned SIP subslots.
Figure 2-1 Single-Height and Double-Height SPA Sizes
Figure 2-2 Horizontal and Vertical Chassis Slot Orientation for SPAs
•Each SPA provides a certain number of connectors, or ports, that are the interfaces to one or more networks. These interfaces can be individually configured using the Cisco IOS command-line interface (CLI).
•Either a blank filler plate or a functional SPA should reside in every subslot of an SIP during normal operation to maintain cooling integrity. Blank filler plates are available in single-height form only.
•SPAs support online insertion and removal (OIR). They can be inserted or removed independently from the SIP. SIPs also support online insertion and removal (OIR) with SPAs inserted in their subslots.
SIP, SSC, and SPA Compatibility
The following tables show SIP, SSC, and SPA compatibility by SPA technology area on the Catalyst 6500 Series switch.
Note Do not install the IPsec VPN SPA in the same chassis as a Cisco 7600 SIP-600 with releases earlier than Cisco IOS Release 12.2(33)SXI.
For more information about the introduction of support for different ATM SPAs, see the "Release History" section on page 6-2.
For more information about the introduction of support for different Ethernet SPAs, see the "Release History" section on page 9-1.
For more information about the introduction of support for different POS SPAs, see the "Release History" section on page 12-1.
For more information about the introduction of support for different serial SPAs, see the "Release History" section on page 14-1.
|
|
|
|
|||
|---|---|---|---|---|---|
|
|
|
|
|
||
IPsec VPN SPA |
SPA-IPSEC-2G |
No |
No |
No |
Yes |
For more information about the introduction of support for the IPsec VPN SPA, see the "Release History" section on page 20-1.
The following notes apply to the SIP, SSC, and SPA compatibility tables:
•Note1—Supported in 12.2SXE and SXF. Support removed in 12.2(33)SXH. Support restored in 12.2(33)SXI.
•Note2—Support added in 12.2(33)SXH.
•Note3—Supported in 12.2SXF. Support removed in 12.2(33)SXH.
•Note4—Support added in 12.2(18)SXF10.
•Note5—Support added in 12.2(33)SXJ.
•Note6—Support added in 12.2(33)SXI2.
Modular Optics Compatibility
Some SPAs implement small form-factor pluggable (SFP) optical transceivers to provide network connectivity. An SFP module is a transceiver device that mounts into the front panel to provide network connectivity.
Cisco Systems qualifies the SFP modules that can be used with SPAs.
Note The SPAs will accept only the SFP modules listed as supported in this document. An SFP check is run every time an SFP module is inserted into a SPA and only SFP modules that pass this check will be usable.
Table 2-6 shows the types of optics modules that have been qualified for use with a SPA:
Feedback