cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
754
Views
0
Helpful
2
Replies

how to enable Firepower 2100 crypto hardware accelerator

kerstin-534
Level 1
Level 1

Can somebody help me ? IPSEC throughput is catastrophic.

I have seen that the hardware accelerator is not enabled, how it is enabled ?

ciscoasa(config)# sh inventory
Name: "module 0", DESCR: "Firepower 2110 Appliance, 1RU, 12 GE, 4 xSFP, 1 MGMT"
PID: FPR-2110

ciscoasa(config)# sh crypto accelerator status
Hardware crypto is not enabled

here in another Hardware: FPR4100 the accelerator is enabled by default

# show crypto accelerator status
Hardware crypto is enabled
Supported TLS Offload Mode: HARDWARE

2 Replies 2

Florin Barhala
Level 6
Level 6

I found using another link that FPR 2100 series do not HW accelerator, so the output is normal/expected.

some people believe there is hardware accelerator https://www.linkedin.com/pulse/firepower-2100-series-specifications-dennis-perto, also https://www.lammle.com/post/cisco-21004100-built-ssl-chip/
Cheapest ASA hardware performs better with IPSEC