Cisco 3925 IPsec throughput

[Steven Field]

I am using Cisco 3925 routers to create a LAN-LAN IPsec VPN, however it appears the throughput is limited to ~85Mbps by something called "Crypto Export Restrictions Manager(CERM)". I found some info on it here: http://www.cisco.com/en/US/docs/routers/access/sw_activation/SA_on_ISR.html#wp1139605

Typing "sh platform cerm-information" confirms that CERM is enabled. Is there anyway of disabling itor increasing the throughput limits?

The routers have permanent "securityk9" licenses installed.

Thanks,

Steve

[Tim Wagner]

Hi Steven,

we have the same "issue" with a 3925-SEC/K9. It is also irritating for us, that the 3925 has the same CERM restrictions as a 2921-SEC/K9.

Did you figure out some information about that since you post here?

Best regards,

Tim

[Steven Field]

Yes I did eventually, you need to buy the HSECK9 licence and install it in order to remove the CERM restriction. Part number was L-FL-39-HSEC-K9= for our 3925. For the 2900 series I belive its L-FL-29-HSEC-K9=.

Regards,

Steve