To sum up. For "pure ip" I can expect no more that 180Mbps. Using onboard crypto and VPN I can expect 36-48 Mbps. Finally, the AIM module (external to the main 3825 motherboard, internal to the router case) only buys me multiple tunnels not a sign...

I would agree my crypto numbers match with that of the ipsecovr.pdf document on page 47. That document took some time to find using google. What could I do to achieve the published 170 Mbps VPN throughput cisco claims in this link? http://www.cisco...

Before I do that, let's go back to my original question. What are the "real" throughput numbers for VPN using onboard VAC and pure ipsec, gre/ipsec, and VTI? Also, if I spend $2K on an external VPN module, will these numbers increase and if so, by ...

I tried pure ipsec with roughly the same numbers for throughput (36-38Mbps). I also tried GRE with no encryption (58-61Mbps) and IP-IP (62-66Mbps). I've got two external VPN encrypters on order and will try to post numbers on those when I have time...

You were right, looks like I've got plenty of free mem (about 20% used/ 80% free).I agree about the large delta. I will reconfigure for pure ipsec and see what I get. It almost seems like GRE/ipsec or VTI (currently configed) is getting process sw...