ISR4431 SEC throughput Limit

[MacC10]

Hello, 

I could not find this on cisco except this:

The Boost License provides a license tier above the Performance License allowing customers to completely remove the ISR4000’s performance limiters. This will make the ISR 4000 platforms perform at entirely new performance levels, allowing for 4+ Gbps of IP Routing (CEF) performance on the 4400 series ISRs. For deployments using encryption, IPSec throughput with AES 256 increases to 250Mbps on the lowest platform up to 10Gbps on the ISR4461.

My question is where can I find the throughput for my exact switch, could not find it in the data sheet.\

Thanks.

[Joseph W. Doherty · Accepted solution]

All I could quickly find, from https://community.spiceworks.com/topic/2289501-cisco-isr-4000-series-question-on-encrypted-throughput

[MHM Cisco World]

Device# show platform hardware throughput crypto

through this command 

Thanks A Lot
MHM 

[MacC10]

it's 1000 mbps but is this, with my Performance License or overall even if I install boost license?

[MHM Cisco World]

share the output of command here 

Thanks A Lot
MHM

[MacC10]

I have the performance license 

[MHM Cisco World]

sorry I want to see the ALL output of  there is line mention the default 

Device# show platform hardware throughput crypto
show platform hardware throughput crypto                              
Current configured crypto throughput level: 250M
     Level is saved, reboot is not required
Current enforced crypto throughput level: 250M
Crypto Throughput is throttled at 250M
Default Crypto throughput level: 10M
Current boot level is network-premier

 Thanks A Lot
MHM

[MacC10]

only have show platform hardware throughput level on this vers.

[MacC10]

I will try to upgrade it via platform hardware throughput level boost to see what it can give me, I have 60 days demo, so I can move it back if necessary.

Thanks for help.

[MHM Cisco World · Accepted solution]

https://lostintransit.se/2022/07/05/modifying-maximum-throughput-of-catalyst8000v/

check this link also. 

Thanks A Lot
MHM

[MacC10]

yea, read it already, thanks for help.

[Joseph W. Doherty]

BTW, forgot to mention, crypto throughput is also limited by its own license.  (Believe this is due to USA federal law where I recall limitations were 85 Mbps, in past, 250 Mbps, currently.). You may need to apply that (HSEC) license too.

Crypto performance also limited by overall throughput license and/or router's physical hardware.  The latter explains the difference ratios of crypto performance to overall performance seen in my earlier reply.

[MacC10]

correct HSEC is needed as well, but the boost for this platform offers up to 500mbps as described in your above post.

[Joseph W. Doherty]

For the 4431, up to 900 Mbps, not 500.

Also, as the performance license supports up to gig, don't be surprised if boost license not increase IPSec performance.