Cisco ISR 4461 bidirectional traffic capacity

[HarshadKulkarni2392]

Hello,

Does Cisco ISR 4461 supports encrypted bidirectional traffic up to 10G?

Thanks in advance.

[Georg Pauwen]

Hello,

it does, as far as I recall. You do need the boost (for unlimited bandwidth) and HSEC l(to remove the 170Mbps encrypyed traffic limit) icenses, though.

[HarshadKulkarni2392]

Hello,

Thanks a lot.

I got the HSEC license for this ISR.

What could be the boost in this case? How to find out the SKU for it?

Thanks in advance.

[HarshadKulkarni2392]

Hello,

I got FL-4460-BOOST-K9 SKU for it. Is it correct? Is it sufficient for the bidirectional traffic up to 10G?

How much capacity increased due to 1 FL-4460-BOOST-K9 license?

Thanks in advance.

[Georg Pauwen]

Hello,

the SKU is:

FL-4460-BOOST-K9 (=)

Check the data sheet:

https://www.cisco.com/c/en/us/products/collateral/routers/4000-series-integrated-services-routers-isr/data_sheet-c78-732542.html

[HarshadKulkarni2392]

Hello,

while adding this item with above mentioned SKU, I received following warnings.

-FL-XXX-BOOST-K9 is incompatible with SDWAN Image (CE100009)
-IOS Technology Package Licenses,Unified Communications,,DVD for ISRWAAS SW Version,Energy Wise MaIagement,PVDM4 DSP’s,mSATA Solid State Drive,Serial Cable ASYNC,Akamai Connect,VADSL Firmware Options,PWR-44XX-POE-AC and FL-44XX-PERF is incompatible with is incompatible with SDWAN Image (CE100009)

How can I proceed here?

Thanks in advance.

[Georg Pauwen]

Hello,

there are hardware/software dependencies, check the white paper below:

https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/white_paper-c11-741071.html

I agree with Joseph, 'over 7Gbps' is rather vague, it means 'more than 7Gbps, but does not give an upper limit...

[Joseph W. Doherty]

BTW, according to Georg's reference the 4461, with boost license, can provide over 7 Gbps.  If you're need 10G, bidirectional, then you'll need up to 20 Gbps.  I would suspect the 4461 will fall short.  Further, the ISR 4K series often seem to struggle obtaining their performance license throughput when doing IPSec.

Just found https://blog.router-switch.com/2019/01/the-new-cisco-isr-4461-faq/ which has the 4461 of supporting up to 7 Gbps for crypto.  Also that document notes it can provide (non-crypto) of 10Gbps, but without services.

The 4461's 7Gbps crypto performance is also noted in this: https://fastreroute.com/cisco-routers-performance/.