2811 Tunnel with CTI IPSec

Unanswered Question
May 21st, 2009

I have setup 2811 routers with tunnel interfaces protected with IPSec via the CTI tunnel profile. Doing this makes the tunnel interface work at 8 Mbps max. I am assuming this is because of the IPSec is encrypting in software.

If I were to get the AIM-VPN/SSL-2 and do encryption in hardware, would this up the limit of 8 mbps on the tunnel interface.

has anyone tried this or is there a security expert who knows this would up the limit and has seen it to be true.



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
handsy Fri, 05/22/2009 - 02:26

According to cisco.com this module provides 40% improvement for VPNs over the built-in software.

Quote: "The Cisco 2800 Series Module (AIM-VPN/SSL-2) can provide hardware-based IPSec encryption services of .... 35 and 100 Mbps in the Cisco 2811....."

Hope this helps.


This Discussion