Cisco 3925 IPsec throughput

Unanswered Question
Mar 1st, 2010

I am using Cisco 3925 routers to create a LAN-LAN IPsec VPN, however it appears the throughput is limited to ~85Mbps by something called "Crypto Export Restrictions Manager(CERM)". I found some info on it here: http://www.cisco.com/en/US/docs/routers/access/sw_activation/SA_on_ISR.html#wp1139605


Typing "sh platform cerm-information" confirms that CERM is enabled. Is there anyway of disabling itor increasing the throughput limits?


The routers have permanent "securityk9" licenses installed.


Thanks,

Steve

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
wagnertim Fri, 01/14/2011 - 06:46

Hi Steven,


we have the same "issue" with a 3925-SEC/K9. It is also irritating for us, that the 3925 has the same CERM restrictions as a 2921-SEC/K9.


Did you figure out some information about that since you post here?


Best regards,

Tim

Steven Field Fri, 01/14/2011 - 07:47

Yes I did eventually, you need to buy the HSECK9 licence and install it in order to remove the CERM restriction. Part number was L-FL-39-HSEC-K9= for our 3925. For the 2900 series I belive its L-FL-29-HSEC-K9=.


Regards,

Steve

Actions

This Discussion