What is the FL-29-HSEC-K9 license for?

[jacinto1m]

Hi,

Can anybody confirm what exactly is the FL-29-HSEC-K9 license for?

Thanks in advace.

[david.hood]

This HSEC license is needed to provide greater VPN throughput and tunnel counts over the standard SEC license. This has to be purchased in addition to the SEC license, or purchased above the 29XX-SEC router bundle. Interestingly enough, this HSEC license is included with the ISM module, so if you think you need the benefit of the ISM offloading, then it does lessen the overal cost a bit. 

The SEC license allow max VPN throughput of 85Mb and 225 tunnels. HSEC is "export restricted" license, as it was explained to me, and will open the SEC licenses restrictions to the router's full capacity. We ran into a tunnel count issue and had to learn this the hard way.

If you are in a scenerio where 85Mb (per direction) and 225 max tunnel count is functional, then there would be no reason to purchase the HSEC license.

[Adrian Martinez]

The HSEC-K9 license removes the curtailment enforced by the U.S. government export restrictions on the encrypted tunnel count and encrypted throughput. HSEC-K9 is available only on the Cisco 2921, Cisco 2951, Cisco 3925, Cisco 3945, Cisco 3925E, and Cisco 3945E. With the HSEC-K9 license, the ISR G2 router can go over the curtailment limit of 225 tunnels maximum for IP Security (IPsec) and encrypted throughput of 85-Mbps unidirectional traffic in or out of the ISR G2 router, with a bidirectional total of 170 Mbps. 

The Cisco 1941, 2901, and 2911 already have maximum encryption capacities within export limits. The HSEC license requires the universalk9 image and the SEC license pre-installed.

[Benzimbleman]

The Configuration Guide explains it best.

http://www.cisco.com/c/en/us/td/docs/routers/access/4400/software/configuration/guide/isr4400swcfg/bm_isr_4400_sw_config_guide_chapter_0101.html

HSECK9

The HSECK9 license is required for a feature to have full crypto functionality. Without the HSECK9 license, only 225 secure tunnels and 85 Mbps of crypto bandwidth would be available. The HSECK9 license allows features in the securityk9 technology package to use the maximum number of secure tunnels and crypto bandwidth. To enable the HSECK9 license, purchase the FL-44-HSEC-K9 license from Cisco.com and install it using the license install license-files command. For further information on obtaining and installing feature licenses, see Configuring the Cisco IOS Software Activation Feature.

Note	The HSECK9 feature does not have an evaluation license that converts to an RTU license after 60 days; a feature license must be obtained.

To enable the license for the HSECK9 feature, the securityk9 technology package is also required. For more information about thesecurityk9 technology package, see securityk9.

[k.langley]

does anyone know what the max tunnels are with HSECK9

[maurilio.goncalves]

Does anyone have the reference link for the US government announcement?