ConnectX-6 Dx Crypto Enable, impossible to enable ipsec_packet on VF

Infrastructure & Networking Adapters and Cables Ethernet Adapter Cards
1

Hello,
I use a ConnectX-6 Dx Crypto Enable card on a Dell R640 with ubuntu 24.04 and kernel 6.8.
The firmware of my card is 22.45.1020.
I installed the last MLNX_OFED, 24.10-3.2.5.0-LTS.

Ipsec packets offload works perfectly with PFs and strongswan.

I would like to use the crypto engine on a VF like this doc says:

I follow the commands but when I try:
/opt/mellanox/iproute2/sbin/devlink port function set pci/0000:08:00.00/1 ipsec_packet enable
mlx5_core: Device not supported
Kernel error

I already double check if on the PF the flow-steering is dmfs.

function set ipsec_crypto works but when I try to add a ip xfrm state , I get a mlx5 error “Crypto offload is not supported”.

Anyone have seen the same problem ?
Do you have any solutions ?

2

Hi

Maybe your card is not the type which support crypto offload.

Please contact Nvidia support for further check:

https://enterprise-support.NVIDIA.com/s/create-case

Thank you