08-15-2018 04:13 PM - edited 03-05-2019 10:51 AM
Hi All,
I cant seem to find a consistent answer to this.
I have a Cisco 4331 router with the performance license installed to support 300Mbps throughput. I also have the HSEC license installed to allow greater than 85Mbps crypto throughput. What I cant seem to confirm is if the HSEC license, coupled with the performance license, allows up to 300Mbps crypto throughput? Can anyone confirm if this?
08-15-2018 05:28 PM
08-16-2018 12:00 AM
08-16-2018 06:06 AM
11-25-2019 09:16 AM
Hi Josept,
I read from your post and someone else about ISR4331. I'm not sure i get the correct understanding or not? If it's wrong , could you please correct for me too?
1. With normal , ISR4331 aggregate throughput is 100 Mpbs.
2. If we use "Performance license" , aggregate throughput is up to 300 Mpbs.
3. But if we use IPsec with Perf Lic but no HSEC license , such IPsec site-to-site, the IPsec aggregate throughput will be not exceed 85 Mbps. And IPsec tunnel will not be exceeded 225 tunnels too.
4. If we use IPsec with Perf Lic and HSEC license, such IPsec site-to-site, the IPsec aggregate throughput will can be exceeded 85 Mpbs. But will can't exceed maximum of aggregate throughput too, such ISR4331 if we use Perf lic then max aggregate throughtput will be 300 Mbps. But with additional HSEC lic , the IPsec aggregate throughput will can't exceed 300 Mbps. And if we consider per direction, it still can't exceed 85 Mbps too.
Hi Joseph, i'm not sure something above that i understand , they are correct or not? If they are wrong ,could you please correct for me and anyone that are confusing about ISR4K license throughput too.
Thanks a lot ,
Amnad
11-25-2019 10:02 AM - edited 11-25-2019 10:06 AM
#1 I believe that's the case.
#2 Ditto.
#3 I think (?) the 65 Mbps is limited to what's generated/encrupted by router. I.e. Decryption might not be limited. Also, If the device is licencse for higher performance, that could still be applied to non-crypto traffic. (BTW, I recall reading later IOS versions have increased the default cap of 85 to 250 Mbps.)
# 4 I believe all true again except decryption might not be part of the crypto limit and also again later IOS versions may have increased the default crypto limit.
Cisco pre-sales (?) should be able to explain their licensing.
08-16-2018 11:49 PM
do you really need high throughput ipsec? 1Gb?
there are another solutions
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide