IPSec bandwith Limitations Firepower 2140

[KevinKevin77455]

Hi guys,

Are they any bandwith limitations per SA on IPsec l2l tunnel? Didnt make it more than 300Mbits on an 1Gbits wanlink

Firepower 2140 on both sides

[Georg Pauwen]

Hello,

according to Table 1 in the document linked below, IPSec VPN/L2L throughput should be 2Gbps.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-2100-series/datasheet-c78-742473.html

[KevinKevin77455 · Accepted solution]

Hi i got answer from cisco:

The issue that is mentioned is addressed in the below documentation bug: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp25274

     *   The FPR and ASA architecture works in a way, that each connection, SA for a better terminology, will utilize one crypto core.

     *   This means that we will not utilize the whole throughput for only one SA.

     *   This also means that the throughput in the datasheet is aggregated, meaning this is for ALL SAs.

     *   In FPR-2140 we’ll have one SA with throughput of ~350 Mbps, and we will keep it this way for each up coming SA, untill we max. out.

Cryptocores on2140 are 16cores

[Georg Pauwen]

Really valuable information, thanks for sharing that !

[KevinKevin77455]

Ure welcome georg stay healthy and inquisitive