asav throughput

[psi2338_1]

Hi All,

I migrated from ASA 5550 to ASAv30. I have a problem with tunnel ipsec throughput. On new ASAv30 i have only 150Mbps for all tunnels, but previu ASA 5550 about 375Mbps. 

-asaV# sh vm

Virtual Platform Resource Limits
--------------------------------
Number of vCPUs : 4
Processor Memory : 8192 MB

Virtual Platform Resource Status
--------------------------------
Number of vCPUs : 4 (Compliant)
Processor Memory : 8192 MB (Compliant)
Hypervisor : VMware
Model Id : ASAv30

ASAv 30 Cisco Adaptive Security Appliance Software Version 9.6(4)

license smart
feature tier standard
throughput level 2G

asaV# sh lice summary

Smart Licensing is ENABLED

Registration:
Status: REGISTERED
Smart Account: XXXXXXXX
Virtual Account: Evaluation Licenses
Export-Controlled Functionality: Allowed
Last Renewal Attempt: None
Next Renewal Attempt: Aug 11 20:42:36 2021 UTC

License Authorization:
Status: AUTHORIZED
Last Communication Attempt: SUCCESS
Next Communication Attempt: Mar 15 18:20:15 2021 UTC

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
ASAv30 Standard - 2G (ASAv-STD-2G) 1 AUTHORIZED

[Mohammed al Baqari]

Hi,

Where is the VA deployed (ESXi/AWS/Azure/OCI).?
Have you used the standard template for the VA?
If its ESXi based, How is the CPU/Memory of the host when the VA is
operating? Have you modified the reservations?
If its ESXi based, is the uplink connectivity healthy (CRC/Duplex/etc).

***** please remember to rate useful posts

[psi2338_1]

VA deployed (ESXi)

Have you used the standard template for the VA  - yes

all hardware is Compliant

esxi i s conected corectly :

Hardware is i82545EM rev01, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Input flow control is unsupported, output flow control is off
MAC address 000c.291f.976c, MTU 1500

I found Data Sheet : Triple Data Encryption Standard/Advanced Encryption
Standard (3DES/AES) VPN throughput 300 Mbps

http://www.netdyninc.com/sw/swchannel/images/ProductCatalog/ProductPage/File/3637198789-datasheet-c78-733399.pdf

but on official cisco site : IPsec VPN throughput (AES 450B UDP test) 2Gbps

https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/datasheet-c78-733399.html

which max throughput ipsec is corect 300 Mbps or 2Gbps if 300Mbps I have reached my max for this 

-asaV# sh vm

Virtual Platform Resource Limits
--------------------------------
Number of vCPUs : 4
Processor Memory : 8192 MB

Virtual Platform Resource Status
--------------------------------
Number of vCPUs : 4 (Compliant)
Processor Memory : 8192 MB (Compliant)
Hypervisor : VMware
Model Id : ASAv30

[Mohammed al Baqari]

Hi,

It will be 300 Mbps. You don't be able to reach 2Gbps on ASAv30.

**** please remember to rate useful posts

[psi2338_1]

Thank You for Your interest in the topic.

Triple Data Encryption Standard/Advanced Encryption Standard (3DES/AES) VPN throughput for ASAv30 - 300Mbps