IPsec Compatibility

IPsec features are compatible with the following Cisco MDS 9000 Family hardware:

• Cisco 18/4-port Multi-Service Module (MSM-18/4) modules and MDS 9222i Module-1 modules.
• Cisco 14/2-port Multiprotocol Services (MPS-14/2) modules in Cisco MDS 9200 Switches or Cisco MDS 9500 Directors
• Cisco MDS 9216i Switch with the 14/2-port multiprotocol capability in the integrated supervisor module. Refer to the Cisco MDS 9200 Series Hardware Installation Guide for more information on the Cisco MDS 9216i Switch.
• The IPsec feature is not supported on the management interface.

IPsec features are compatible with the following fabric setup:

• Two connected Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release 2.0(1b) or later, or Cisco NX-OS Release 4.1(1).
• A Cisco MDS 9200 Switches or Cisco MDS 9500 Directors running Cisco MDS SAN-OS Release 2.0(1b) or later, or Cisco NX-OS Release 4.1(1) connected to any IPsec compliant device.
• The following features are not supported in the Cisco NX-OS implementation of the IPsec feature:
• Authentication Header (AH)
• Transport mode
• Security association bundling
• Manually configuring security associations
• Per host security association option in a crypto map
• Security association idle timeout
• Dynamic crypto maps

Note     Any reference to crypto maps in this document, only refers to static crypto maps.

---

Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.