In VPP 18.04, QAT crypto devices appear as "down":

1. vppctl show dpdk crypto device | grep crypto_qat | head -2
   0000:39:01.0 crypto_qat down
   0000:39:01.1 crypto_qat down
   #

In ../src/plugins/dpdk/ipsec/cli.c, format_crypto () looks at variable "dev_started"
to determine whether to print "up" or "down":

s = format (s, "%25s%-20s%-10s\n", dev>name, drv->name,
rte_cryptodevs[dev->id].data->dev_started ? "up" : "down");

This variable should be set in DPDK routine rte_cryptodev_start().
However, VPP 18.04 does not call rte_cryptodev_start().

The following change adds rte_cryptodev_start(), but doesn't yet
handle possible error returns:

diff --git a/src/plugins/dpdk/ipsec/ipsec.c b/src/plugins/dpdk/ipsec/ipsec.c
index 3574f3e..aabf957 100644
— a/src/plugins/dpdk/ipsec/ipsec.c
+++ b/src/plugins/dpdk/ipsec/ipsec.c
@@ -728,6 +728,7 @@ crypto_scan_devs (u32 n_mains)
}

crypto_parse_capabilities (dev, info.capabilities, n_mains);
+ rte_cryptodev_start ;
}
}

With this change, one sees:

1. vppctl show dpdk crypto device | grep crypto_qat | head -2
   0000:39:01.0 crypto_qat up
   0000:39:01.1 crypto_qat up
   #