WAN VPN Compression

[h00nix101]

Hi

At present we have a 70Mb WAN connection with a 7204VXR at each end, each router contains a NPE-400 card.

A ike vpn is setup up but there is no comp-lzs

in the vpn transform set. So I assume

1) No compression will be taking place

2) What reduction in bandwidth is likely if lzs is

enabled.

3) Any commands to display stats once compression is

enabled.

Thanks

[carlosv]

Hi,

1) Yes, no compression is taking place.

2) It depends on the kind of traffic. I've seen 3.5:1, 4:1 typically.

3) If you have a VAM-PA or an ISA-PA card (highly recommended if you do compression) you can do:

sh crypto engine accelerator stat

If no hardware encryption is available you can issue a standar show crypto ipsec sa and see how many packets have been compressed.

Hope this helps.

Carlos