Crypto engine probe commands -- crypto-engine accelerator disable

Use crypto-engine accelerator disable to disable hardware crypto engines.

Use undo crypto-engine accelerator disable to enable hardware crypto engines.

Syntax

crypto-engine accelerator disable

undo crypto-engine accelerator disable

Default

Hardware crypto engines are enabled.

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

By default, hardware crypto engines are enabled. You can use the crypto-engine accelerator disable command to disable them globally. However, disabling hardware crypto engines can degrade the encryption or decryption performance. As a best practice, do not disable hardware crypto engines except for testing, debugging, or troubleshooting purposes.

Enabling or disabling hardware crypto engines affects different service modules differently. For example, for IPsec services, enabling or disabling hardware crypto engines affects only newly established IPsec SAs. The existing IPsec SAs still use the previously selected crypto engine for data encryption. As a best practice, use the reset ipsec sa command to delete all existing IPsec SAs before enabling or disabling hardware crypto engines.

Crypto engine probe commands -- display system internal virtual-crypto-engine

Use display system internal virtual-crypto-engine to display virtual crypto engine information.

Syntax

display system internal virtual-crypto-engine

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command does not display any information if the device does not have virtual crypto engines.

Crypto engine probe commands -- display system internal virtual-crypto-engine statistics

Use display system internal virtual-crypto-engine statistics to display virtual crypto engine statistics.

Syntax

Distributed devices in standalone mode:Centralized IRF devices:

display system internal virtual-crypto-engine statistics [ engine-id engine-id slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display system internal virtual-crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

engine-id engine-id: Specifies a virtual crypto engine by its ID. The value range varies by device model.

slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Usage guidelines

If you do not specify any parameters, this command displays statistics for all virtual crypto engines.

Crypto engine probe commands -- reset system internal virtual-crypto-engine statistics

Use reset system internal virtual-crypto-engine statistics to clear virtual crypto engine statistics.

Syntax

Distributed devices in standalone mode:Centralized IRF devices:

reset system internal virtual-crypto-engine statistics [ engine-id engine-id slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset system internal virtual-crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

engine-id engine-id: Specifies a virtual crypto engine by its ID. The value range varies by device model.

slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Usage guidelines

If you do not specify any parameters, this command clears statistics for all virtual crypto engines.