2821 with AIM-VPN/SSL-2 high CPU utilization

[Ralph Rye]

I have a 2821 that I am using in a IPSSEC VPN setup and the rotuer is experiencing very high CPU utilization when traffic rates are high (40 Mpbs).

I am concerned because I have another 2821 router using the on-board VPN module and its configuration is almost identical (another spoke on the DMVPN setup) to the 2821 with AIM module but the CPU utilization is drastically lower given similar traffic loads.

The 2821 with AIM module is running 12.4(9)T4. Is there possibly improvement in later code releases?

Anyone have any CPU utilization issues with there AIM modules?

Thanks,

Ralph

[tstanik]

Check if you have configured manual crypto maps in your router as manual keys are not supported in hardware, therefore all crypto will happen in software. Following link may help you

http://www.cisco.com/en/US/docs/ios/12_2/12_2z/12_2zj/feature/guide/gtaimvpn.html#wp1042343

[Ralph Rye]

I believe you are referring to this statement from the link you posted:

Restrictions for DES/3DES/AES VPN Encryption Module

•Rivest-Shamir-Adelman (RSA) manual keying is not supported.

Correct?

My question is do they mean Manual keying = pre-shared keys??

Thanks