AIM Module

ksarin123_2 · ‎02-11-2009

Hi folks -

I have a couple of Cisco 2811 routers with AIM module in it. Can anyone tell me what this AIM module is for? From what I've read on the Internet, this is the module for better IPSEC VPN performance.

Our 2811 router's motherboard already have an integrated VPN port adapter. I am assuming this is another hardware module for better VPN performance. So I guess what is the difference between the VPN port adapter and the AIM Module?

Also, isn't the IOS in the router capable of handling VPN connections? Do we really need these additional h/w modules?

Thanks very much for your help!

paolo bevilacqua · ‎02-11-2009

First, check which exact AIM module you have with "show diag", as there are various models.

The module will become necessary only when handling a large volume of traffic or many peers. Another application is SSL VPN.

Otherwise as you said the embedded HW accelerator is enough for most cases.

ksarin123_2 · ‎02-11-2009

The AIM module we have is (AIM-VPN/EPII-PLUS).

So again, my question is, what functionality does this module provide that the integrated VPN port adapter does not?

Thanks!

paolo bevilacqua · ‎02-11-2009

In one word, scalability. See:

https://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps7180/prod_brochure09186a00801f0a72.html

Table 3.

ksarin123_2 · ‎02-11-2009

Thanks! That's what I was looking for!

paolo bevilacqua · ‎02-11-2009

You are welcome, thank you for the nice rating and good luck!

Edison Ortiz · ‎02-11-2009

If you look at the product's page, the 2811 comes with that exact same module internally.

http://www.cisco.com/en/US/products/ps5881/index.html

To answer your question, the difference is none.

HTH,

__

Edison.

paolo bevilacqua · ‎02-11-2009

Hi Edison, actually what the datasheet says is that WITH the AIM-VPN/EPII-PLUS (now replaced by AIM-VPN/SSL-2), you can do 1500 sessions.

Then from the infamous "VPN portfolio" document, we learn that it would do 200 without, and again 1500 with AIM-VPN/SSL-2 that is the replacement for the older type.

At least I understand it this way.

Edison Ortiz · ‎02-11-2009

Paolo,

Good point.

You want to be more confused?

See the Mbps rating on the SSL-2 page

http://www.cisco.com/en/US/prod/collateral/routers/ps5853/data_sheet_vpn_aim_for_18128003800routers_ps5853_Products_Data_Sheet.html

vs the VPN document you posted.

For instance, on the link I posted it claims:

90 and 125 Mbps in the Cisco 2821

and the VPN document claims 140Mbps.

__

Edison.

paolo bevilacqua · ‎02-11-2009

You want to be really really confused ?

Compare whatever document figure with your own stringent performance testing :)