ISR 4000 - VPN tunnel without encryption

[danielsanmartin]

Hi all.
Knowing the limitation of 85Mbps in the encryption of the ISR4000 routers, the use of a VPN tunnel without encryption will allow a greater bandwidth without limitations?

Regards

[balaji.bandi]

yes you can get more bandwidth depends on License model.

check the model comparison.

https://www.cisco.com/c/en/us/products/routers/4000-series-integrated-services-routers-isr/models-comparison.html

[danielsanmartin]

Hi Balaji.

Thanks for the prompt response.
That is, the VPN tunnel without encryption will have a maximum bandwidth of 100Mbps in the case of an ISR4331 and 1Gbps for an ISR4451 without an additional license?

Regards

[balaji.bandi · Accepted solution]

yes correct, another question if you do not need encryption why you need ISR, you can consider L3 Switch or FW ?

Since we do not know requirement, can not suggest right one for you.

[danielsanmartin]

Our client has already purchased the ISR4000 equipment through a tender.
For administrative reasons, it is not possible to immediately purchase the HSEC license or performance or boost. That's why he's trying to make do with what he has.

[Joseph W. Doherty]

BTW, later ISR 4K IOS images now have a higher IPSec performance limit before needing a license upgrade.

Also BTW, don't forget, even with non-encrypted tunnels, you still want to configure to avoid IP fragmentation.

[danielsanmartin]

Hi Joseph.

A higher IPSec performance in later ISR 4K IOS images applies only to ISR4451X or the entire ISR4000 series?

Regards

[Joseph W. Doherty]

Unsure, but the lower end 4K ISRs may not offer enough base performance to take advantage of the increase.