So, I know in the later released of IOS XE 16.8.x the default has been raised for IPSec throughput. But for people running IOS XE code before that, I would like some help in verifying IPSec Aggragate Throughput.
From my understand, If I have a ISR 4k Series router with IPSec License, then my maximum aggregate throughput is 85Mbps, and up to 225 IPsec Tunnels, if that is correct?.
Performance Examples from Cisco
ISR 4000 Series Performance Licenses
ISR4451 FL-44-PERF-K9 Increases the performance from base performance 1 Gbps to 2 Gbps
ISR4431 FL-44-PERF-K9 Increases the performance from base performance 500 Mbps to 1 Gbps
ISR4351 FL-4350-PERF-K9 Increases the performance from base performance 200 Mbps to 400 Mbps
ISR4331 FL-4330-PERF-K9 Increases the performance from base performance 100 Mbps to 300 Mbps
ISR4321 FL-4320-PERF-K9 Increases the performance from base performance 50 Mbps to 100 Mbps
ISR4221 FL-4220-PERF-K9 Increases the performance from base performance 35 Mbps to 75 Mbps
Also, I know if I have a ISR 4221 for example, hsr 75Mbps, so if I wanted that router for 85Mbps of IPSec aggregate throughput, that would clearly be a wrong way to go.
Now if I had a ISR4331 with Performance License so I get a maximum of 300Mbps aggregate and IPSec License, if everything was maxed out, would that leave an aggregate of 85Mbps for IPSec throughput, then 300-85 for all other traffic? Then obviously, if I needed more IPSec aggregate throughput in the example above, I would need to get HSEC?
I apologize in advance if this sounds confusing.
