ISR Performance IPSEC

[EzequielPeralta9509]

Hello, I´m Ezequiel and I need to know the real performance of the ISR4431 and 4451, because we need to encrypt one link of 1 Gbps with AES 256 SHA, also it must support OSPF and BGP.

Thanks in advance

Ezequiel

[Jaderson Pessoa]

@EzequielPeralta9509 hello,

I hope that it can help you.

Check it to took all information about difference.

https://www.cisco.com/c/pt_br/products/routers/4000-series-integrated-services-routers-isr/models-comparison.html

[Jaderson Pessoa]

Hello Ezequiel,

To run with this performance you wont need any other license, but to run VPN IPSEC you will need license for it; Recently i bought the same model to a client and the license required was it;

SL-44-SEC-K9=

SecurityPAKforCiscoISR4400Series

1

18.227,00

BRL

If have doubts with which license, check with your vendor;

Please, dont forget to mark as solved and helpful all post that were helped you.

Obs: I'm not able to answer to private massage, i received the message below;

"You have reached the limit for number of private messages that you can send for now. Please try again later."

Regards,

[Joseph W. Doherty]

Could you defined what you mean by "real performance"?

Those routers, if you keep to their "normal" capacity license limits, should be able to meet those limits, except perhaps near those limits for IPSec traffic. If they fall short for the latter, it's probably within 10% or less shortage. (You might search the Internet for 3rd party performance testing of those routers.)

Somewhat recently, Cisco has provided "boost" performance licenses which remove the license performance cap. In that case, performance becomes very dependent on your router's configuration and the nature of the traffic. I.e. it becomes very variable, much as it was with ISRs before the 4K series. You should be able to obtain at least whatever could be obtained before the license cap was removed, but the gain might be zero to a lot.