system ipsec¶

Configure Crypto Cores for IPsec processing

ipsec Specification¶

Parameter Value

Type Configuration Resource

Element Name ipsec

Element URI /axapi/v3/system/ipsec

Element Attributes ipsec_attributes

Partition Visibility shared

Schema ipsec schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/system/ipsec	ipsec attributes
POST /axapi/v3/system/ipsec Payload: { "ipsec": { "packet-round-robin": 1, "fpga-decrypt": { "action": "enable" } } }
Get Object	GET	/axapi/v3/system/ipsec	ipsec attributes
Modify Object	POST	/axapi/v3/system/ipsec	ipsec attributes
Replace Object	PUT	/axapi/v3/system/ipsec	ipsec attributes
Delete Object	DELETE	/axapi/v3/system/ipsec	ipsec attributes

ipsec attributes¶

QAT

Description HW assisted QAT SSL module

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

crypto-core

Description Crypto cores assigned for IPsec processing

Type: number

Range: 0-64

Default: 0

crypto-mem

Description Crypto memory percentage assigned for IPsec processing (rounded to increments of 10)

Type: number

Range: 0-100

Default: 0

fpga-decrypt

Description: fpga-decrypt is a JSON Block. Please see below for fpga-decrypt

Type: Object

Reference Object: /axapi/v3/system/ipsec/fpga-decrypt

packet-round-robin

Description Enable packet round robin for IPsec packets

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

fpga-decrypt¶

Specification Value

Type object

action

Description ‘enable’: Enable FPGA decryption offload; ‘disable’: Disable FPGA decryption offload;

Type: string

Supported Values: enable, disable

Default: disable