Printer FriendlyEmail Article Link

How do I check IPSec cavium card (IPSec accelerator card) is working fine on Landslide?

Answer

If the test server doesn't have a cavium card (ipsec accelerator card) or cavium card can't work, we will see the related information in debug logs, such as:

6245| Thu Sep  9 09:36:32. 61247| ../src/ipsecTunnelNodeCN1010v2_1.cc|   343| checkForAccelleratorCard|  Critical| Search kernel for Cavium card
6245| Thu Sep  9 09:36:32. 61266| ../src/ipsecTunnelNodeCN1010v2_1.cc|   364| checkForAccelleratorCard|  Critical| Return 0
6245| Thu Sep  9 09:36:32. 61270| ../src/ipsecTunnelNodeCN1010v2_1.cc|   366| checkForAccelleratorCard|      Exit| 
6245| Thu Sep  9 09:36:32. 61274|  ../src/tclIpsecTunnelInteg.cc|   272| initIpsecTunnel|  Critical| No IPSEC accellerator card. Using software mode.
 
The best way to verify the Cavium card (ipsec accelerator card) is working is in the ts.log.9 file.  Look for this line "Finished initializing Cavium"
3453| Sun Apr 17 14:52:23.510100|        ../src/cavium_CN1620.cc|   213|  Cavium1620Init|  Critical| Finished initializing Cavium0
 
You also can telnet to test case for checking if there is the cavium card in the box.
 
##>lspci | grep encry
0a:00.0 Network and computing encryption device: Cavium Networks Nitrox XL NPX (rev 01)
0b:00.0 Network and computing encryption device: Cavium Networks Nitrox XL NPX (rev 01)
0c:00.0 Network and computing encryption device: Cavium Networks Nitrox XL NPX (rev 01)
0d:00.0 Network and computing encryption device: Cavium Networks Nitrox XL NPX (rev 01)
 
And if Cavium information is printed out, then there may be a problem of the Cavium card.
Just like:
##>lspci | grep encry
03:01.0 Network and computing encryption device: Unknown device 177d:0003

Product : Landslide,IPSec