RE: [swinog] crypto performance of cisco 2800 series vs AIM-VPN/SSL2

2008-04-29 Diskussionsfäden Stefan Heusi (sheusi)
Hi Steven, 

Under www.cisco.com/go/srnd you can find the below Solution Reference
Network Design (SRND) Guide for DMVPN, which gives you the performance
data for the various design scenario of DMVPN in Chapter 4, please
consider average packet size, crypto chip performance vs bi-directional
traffic when trying to match it with your results:

http://www.cisco.com/application/pdf/en/us/guest/netsol/ns171/c649/ccmig
ration_09186a008075ea98.pdf 

Cheers 

Stefan 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, April 29, 2008 10:05 AM
To: [EMAIL PROTECTED]
Subject: [swinog] crypto performance of cisco 2800 series vs
AIM-VPN/SSL2

hi all

we're troubleshooting some performance issues on a cisco 2801 with
onboard crypto engine (not with an additional AIM-VPN/SSL2).
the problem is that in the DMVPN setup (crypted tunnel) we have a
thruput of around 4mbit with 90% of CPU.
according to the cisco specs we should reach 30-40mbit of encrypted
traffic... but our tests are ... well.. not that positive...

do you have made similar experiences?

so, does someone has a AIM-VPN/SSL2 for a cisco 2800series around which
we could lend out for some days to perform some tests?

greetings

-steven
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


[swinog] crypto performance of cisco 2800 series vs AIM-VPN/SSL2

2008-04-29 Diskussionsfäden Steven.Glogger
hi all

we're troubleshooting some performance issues on a cisco 2801 with
onboard crypto engine (not with an additional AIM-VPN/SSL2).
the problem is that in the DMVPN setup (crypted tunnel) we have a
thruput of around 4mbit with 90% of CPU.
according to the cisco specs we should reach 30-40mbit of encrypted
traffic... but our tests are ... well.. not that positive...

do you have made similar experiences?

so, does someone has a AIM-VPN/SSL2 for a cisco 2800series around which
we could lend out for some days to perform some tests?

greetings

-steven
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog