CERM & esp-null

[Andrii Oliinyk]

Hi Gurus of industry

i wonder does on ISR2G CERM enforces on the ESP-NULL (0 cipher) protected traffic the same restrictions as on regularly protected traffic (meaning no HSECK9 is enabled & BW is limited to 85Mbps of unidirectional protected traffic)? 

[Georg Pauwen · Accepted solution]

Hello,

as I understand it, CERM reserves the tunnel, and everything that goes through the tunnel, whether it is null encrypted or not, is subject to the bandwidth limitation.

The link below could be useful:

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/118746-technote-isr-00.html#anc8

[Andrii Oliinyk]

10x Georgy
that's what i've expected.