DMVPN HUB and SPOKE HW selection help

[Skjalg Eggen]

hi!

I'm designing a DMVPN solution for one of our customers.

requirements:

150+ locations

50-100 Mb/s IPSEC throughput combined at the HUBs

Low cost (as allways )

I'm going for a dual HUB dual cloud design with EIGRP.

This is to replace a static ASA to ASA S2S VPN solution.

With the ASA's Throughput is not a problem with 5505's at the locations and 5510's as HUBs.

I'm thinking of a couple of 2951's with Cisco VPN Internal Service Module (VPN ISM) as HUBs and 1800 or 870 as spokes.

Spokes will be on low bandwith 2-8 Mb/s ADSL links.

i  am conserned with throughput limitations on the HUB's though. I've seen some throughput tables with very low throughput for the 2800 series (under 20 Mb/s) with VPN, but those numbers were without the . I cannot find any similar tables for the 2900 series with VPN ISM.

With VPN ISM in place Cisco promises 2-3 times better on board performance

(http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps12202/data_sheet_c78-682436.html)

But I am not certain this that this would be the case.

Does this HW look OK for my requirements, or am I on the wrong track?

[Skjalg Eggen]

Spokes should be 1900 series or 800 series.

[Jeff Van Houten]

I think you are dead on.

Sent from Cisco Technical Support iPad App

[Skjalg Eggen]

That sounds good

Anybody know of a ipsec througput table for routers with Cisco VPN Internal Service Module (VPN ISM)?

Would be awsome to have in a HW selection phase.

It is kind of weird that it doesnt say anything about this in the specs for routers.

For ASA FW's its always in the specs.