Mel, 50 Mbps seems may be the touching limitation indeed, in your case. -
IP740's would choke depending upon the number of rules/packet size/type of
encryption in use. The official Nokia figures w/ a base of 100 rules and w/
an encryption acclerator card can go down to as low as just 8Mbps depending
upon the lowest packet size of 64bytes if it is SHA-1/AES256 or
SHA-1/AES128.
Considering an average normal packet size of 1450 bytes+SHA-1/AES256+100
rules, the throughput officially is shown to go up just to 71Mbps - but
remember these tests and these official numbers thereof are very deceptive.
I guess if you are starting to see some choking at 50Mbps, it is
unfortunately what IP740 would give you in case your traffic mix resembles
what I have suggested.(you can obtain these numbers from Nokia Sales rep -
may not be available online now - check it though).
We had personally gone through some grueling experience w/ IP740's low
performances.
hth,
rajeev
On 1/22/07, Mel Cheng <[EMAIL PROTECTED]> wrote:
Hi :
We met a problem about the FW CPU loading raised to 90% when
throughput reach to 50M bps. Our platform is Nokia IP740 with 1G memory,
IPSO3.8
,and FW is R55,
So do you know any capacity limit in IP740 with R55?
Many Thanks,
Mel
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
