topic ASA 5510 interface throughput in Network Security https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153158#M357106 <HTML><HEAD></HEAD><BODY><P>that value does NOT mean anything.&nbsp; The answer is "it depends".</P><P></P><P>Let say if you have 170 IPSec tunnel on the ASA and that all of the IPSec tunning tunnels are working at the same time, you are not going to get 170Mbps IPSec throughput.&nbsp; If you have a single IPSec tunnel, then maybe.&nbsp; Even at a single tunnel, you may not get 170Mbps IPSec tunnel with 64-bytes packet.</P></BODY></HTML> Tue, 05 Feb 2013 12:54:43 GMT david.tran 2013-02-05T12:54:43Z ASA 5510 interface throughput https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153157#M357105 <P>I'm not clear about the capabilities of the ASA 5510 GigE interfaces (eth0/0 and eth0/1) with an without IPSEC tunnels enabled.</P><P></P><P>This page <A href="http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html" target="_blank">http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html</A> shows a figure of 170Mbps 'Maximum 3DES/AES VPN Throughput'. Does that mean per IPSEC tunnel or for the whole interface if it is IPSEC-enabled?</P><P></P><P>Help appreciated <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/tiny_mce3/plugins/jiveemoticons/images/spacer.gif"></SPAN></P> Tue, 12 Mar 2019 00:56:21 GMT https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153157#M357105 handsy 2019-03-12T00:56:21Z ASA 5510 interface throughput https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153158#M357106 <HTML><HEAD></HEAD><BODY><P>that value does NOT mean anything.&nbsp; The answer is "it depends".</P><P></P><P>Let say if you have 170 IPSec tunnel on the ASA and that all of the IPSec tunning tunnels are working at the same time, you are not going to get 170Mbps IPSec throughput.&nbsp; If you have a single IPSec tunnel, then maybe.&nbsp; Even at a single tunnel, you may not get 170Mbps IPSec tunnel with 64-bytes packet.</P></BODY></HTML> Tue, 05 Feb 2013 12:54:43 GMT https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153158#M357106 david.tran 2013-02-05T12:54:43Z ASA 5510 interface throughput https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153159#M357107 <HTML><HEAD></HEAD><BODY><P>Right, so it therefore means that if you have IPSEC-enabled on an interface, that interface max throughput is 170Mbps. That's the crux of it right?</P></BODY></HTML> Tue, 05 Feb 2013 13:06:23 GMT https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153159#M357107 handsy 2013-02-05T13:06:23Z ASA 5510 interface throughput https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153160#M357108 <HTML><HEAD></HEAD><BODY><P>No, that is NOT true, according to my test.&nbsp; </P><P></P><P>When you have IPSec enable on the interface, the non-IPSec traffics can go above 170Mbps.&nbsp; You can not exceed 170Mbps IPSec throughput along with other IPSec traffics because the CPU will be busy processing IPSec traffics.</P><P></P><P>does it help?</P></BODY></HTML> Tue, 05 Feb 2013 19:45:13 GMT https://community.cisco.com/t5/network-security/asa-5510-interface-throughput/m-p/2153160#M357108 david.tran 2013-02-05T19:45:13Z