cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
921
Views
0
Helpful
1
Replies

3945 IKEv2 VPN Performance

Sakun Sharma
Level 1
Level 1

Hello,

 

I have configured an IKEv2 VPN to ASA5555 using AES-128. I am getting very low VPN throughput, around 25Mbps. Any idea what I am doing wrong.

 

VPN Config on 3945:

 

crypto ikev2 proposal LowSec
encryption aes-cbc-128
integrity md5
group 5
!
crypto ikev2 policy VPNPolicy
proposal LowSec
!
!
crypto ikev2 keyring KR1
peer P1
address x.x.x.x
pre-shared-key x.x.x.x
!
!
!
crypto ikev2 profile VPN-Profile
match identity remote address x.x.x.x 255.255.255.255
authentication remote pre-share
authentication local pre-share
keyring local KR1
!
!
!
crypto ipsec transform-set LowSec-TS esp-aes esp-md5-hmac
mode tunnel
!
!
!
crypto map CMAP-VPN 10 ipsec-isakmp
set peer x.x.x.x
set transform-set LowSec-TS
set pfs group5
set ikev2-profile VPN-Profile
match address ASA-VPN

 

Router Product ID is C3900-SPE150/K9

 

Thanks in Advance.

1 Reply 1

trakimanhminh
Level 1
Level 1
Do you have these things?

- HSEC License
- Module ISM-VPN-39

They will increase your VPN speed on the 3945 router.