2821 with AIM-VPN/SSL-2 high CPU utilization

Unanswered Question
Jan 23rd, 2008

I have a 2821 that I am using in a IPSSEC VPN setup and the rotuer is experiencing very high CPU utilization when traffic rates are high (40 Mpbs).

I am concerned because I have another 2821 router using the on-board VPN module and its configuration is almost identical (another spoke on the DMVPN setup) to the 2821 with AIM module but the CPU utilization is drastically lower given similar traffic loads.

The 2821 with AIM module is running 12.4(9)T4. Is there possibly improvement in later code releases?

Anyone have any CPU utilization issues with there AIM modules?



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
tstanik Tue, 01/29/2008 - 13:30

Check if you have configured manual crypto maps in your router as manual keys are not supported in hardware, therefore all crypto will happen in software. Following link may help you


rrye@norgetek.com Wed, 02/20/2008 - 20:16

I believe you are referring to this statement from the link you posted:

Restrictions for DES/3DES/AES VPN Encryption Module

•Rivest-Shamir-Adelman (RSA) manual keying is not supported.


My question is do they mean Manual keying = pre-shared keys??



Login or Register to take actions

This Discussion

Posted January 23, 2008 at 1:32 PM
Replies:2 Overall Rating:
Views:928 Votes:0
Tags: No tags.