2821 with AIM-VPN/SSL-2 high CPU utilization

Unanswered Question
Jan 23rd, 2008

I have a 2821 that I am using in a IPSSEC VPN setup and the rotuer is experiencing very high CPU utilization when traffic rates are high (40 Mpbs).

I am concerned because I have another 2821 router using the on-board VPN module and its configuration is almost identical (another spoke on the DMVPN setup) to the 2821 with AIM module but the CPU utilization is drastically lower given similar traffic loads.

The 2821 with AIM module is running 12.4(9)T4. Is there possibly improvement in later code releases?

Anyone have any CPU utilization issues with there AIM modules?

Thanks,

Ralph

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
tstanik Tue, 01/29/2008 - 13:30

Check if you have configured manual crypto maps in your router as manual keys are not supported in hardware, therefore all crypto will happen in software. Following link may help you

http://www.cisco.com/en/US/docs/ios/12_2/12_2z/12_2zj/feature/guide/gtaimvpn.html#wp1042343

rrye@norgetek.com Wed, 02/20/2008 - 20:16

I believe you are referring to this statement from the link you posted:

Restrictions for DES/3DES/AES VPN Encryption Module

•Rivest-Shamir-Adelman (RSA) manual keying is not supported.

Correct?

My question is do they mean Manual keying = pre-shared keys??

Thanks

Actions

Login or Register to take actions

This Discussion

Posted January 23, 2008 at 1:32 PM
Stats:
Replies:2 Overall Rating:
Views:925 Votes:0
Shares:0
Tags: No tags.
 

Discussions Leaderboard

Rank Username Points
1
tsteger1
916
2
acomiskey
894
3
Patrick Iseli
850
4
jmia@ohgroup.co.uk
808
5
jackko
787
Rank Username Points
Collin Clark
12
Karsten Iwen
10
Neno Spasov
10
Marvin Rhoads
9
Scott Olsen
5