The difference between ISM-VPN module and SEC, HSEC license

[mhiyoshi]

I appreciate if you know about the difference between ISM-VPN module and SEC, HSEC license.

The following is related information.

[Cisco VPN Internal Service Module for Cisco ISR G2]

http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps12202/data_sheet_c78-682436.html

[Cisco ISR G2 SEC and HSEC Licensing]

http://www.cisco.com/en/US/prod/collateral/routers/ps10536/qa_c67_606268.pdf

I think basically SEC, HSEC license removed the unlimited feature on ISR G2.

So I am wondering the ISM-VPN purpose.

And the attached is ISR performance overview.

Best Regards,

[Giuseppe Larosa]

Hello Mhiyoshi,

the ISM VPN module is an hardware based module for performing encrpytion / de-encryption and its purpose is to reduce usage of main cpu resources in the ISR G2 router.

Licenses are part of licensing model introduced with ISR G2 and provide the right to run some advanced features that would be otherwise disabled. Among these features there are those related to encryption.

SEC-K9 has some limitations in terms of number of tunnels and total encrypted traffic throughput.

So you need the right license installed to be able to configure and run the feature, you may need the HW based ISM VPN module if the aggregate encrypted traffic volume is so high  that it would load too much the main processor.

So I would see the ISM VPN as a good companion for the HSEC-K9 license

Hope to help

Giuseppe

[mhiyoshi]

Hello Giuseppe

Thank you for your support.

Well, actually their difference are like below. right?

SEC, HSEC license just remove the limitation of ISR G2 router. (S/W support)

ISM VPN module reduce the usage of main CPU resouce. (H/W support)

Best Regards,

Hiyoshi

[Giuseppe Larosa]

Hello Hiyoshi,

>> SEC, HSEC license just remove the limitation of ISR G2 router. (S/W support)

ISM VPN module reduce the usage of main CPU resouce. (H/W support)

yes this is correct

Hope to help

Giuseppe

[mhiyoshi]

Hello Giuseppe

Thank you very much.

Best Regards,

Masanobu Hiyoshi