Solved: IPSEC encryption across country borders

zeltiqrpugh · ‎06-21-2016

A question on creating encrypted VPN tunnels from the USA to Ireland and/or the UK:

Are the limitations or restrictions on encrypting an IPSEC Tunnel with respect to connections sent outside the USA? My brain has some fuzzy memories of "export restrictions".

Philip D'Ath · ‎06-21-2016

You can use crypto pretty much everywhere, but you can't use "strong" crypto in US Export "restricted" countries. In some cases their is a crypto throughput limit (85Mb/s from memory).

The UK and Ireland would not be US export controlled destinations for strong cryptography, so you wont have any issues.

Note that most Cisco routers with base licencing comply with the speed restriction, and you have to buy the HSEC licence to enable the extra throughput.

View solution in original post

Philip D'Ath · ‎06-21-2016

You can use crypto pretty much everywhere, but you can't use "strong" crypto in US Export "restricted" countries. In some cases their is a crypto throughput limit (85Mb/s from memory).

The UK and Ireland would not be US export controlled destinations for strong cryptography, so you wont have any issues.

Note that most Cisco routers with base licencing comply with the speed restriction, and you have to buy the HSEC licence to enable the extra throughput.