cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
810
Views
0
Helpful
2
Replies

IPSEC Performance

Altensalzer
Level 1
Level 1

we've a headqurater with two 3845-routers and about 15 satellites with 1800-/ 1900 router, wich are connected over site-2-site tunnels (GRE+IPSEC
) with OSPF as routing-protocol. The headquarter has 2x 100Mbit WAN-connection. The bandwith at the satellites was increasing - it differs from 2 - 30Mbit. And now the 3845-ers are reaching their capacity-border an falling into cpu-outage. We want them replace with 4431-er or 1001x ASR's.

Which is the max. throughput (GRE over IPSEC) of the 4431-ers versus the 1001x?

My actual max throughput is 200Mbit - but I have to estimate that its raising upto 1Gbit.

An other possibility is to discard the dynamic routing and take an ASA(no GRE ?!) and use static routes. Which ASA-model would be suitable for this task: 200Mbit .. up to 1Gbit encrypted traffic ( AES - or GCM)?

2 Replies 2

Iulian Vaideanu
Level 4
Level 4

I found this about the ISR 4000 family: http://miercom.com/pdf/reports/20150817.pdf

I couldn't find something similar about exactly ASR1001X, but IPSec performance for ASR1K seems to be significantly higher: http://www.cisco.com/c/dam/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/Miercom-ASR1000.pdf

Hi Julian, thank you very much. That's exactly what I'm looking for.