Cisco 3925 IPsec throughput

Unanswered Question
Mar 1st, 2010
User Badges:

I am using Cisco 3925 routers to create a LAN-LAN IPsec VPN, however it appears the throughput is limited to ~85Mbps by something called "Crypto Export Restrictions Manager(CERM)". I found some info on it here:

Typing "sh platform cerm-information" confirms that CERM is enabled. Is there anyway of disabling itor increasing the throughput limits?

The routers have permanent "securityk9" licenses installed.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Tim Wagner Fri, 01/14/2011 - 06:46
User Badges:

Hi Steven,

we have the same "issue" with a 3925-SEC/K9. It is also irritating for us, that the 3925 has the same CERM restrictions as a 2921-SEC/K9.

Did you figure out some information about that since you post here?

Best regards,


Steven Field Fri, 01/14/2011 - 07:47
User Badges:

Yes I did eventually, you need to buy the HSECK9 licence and install it in order to remove the CERM restriction. Part number was L-FL-39-HSEC-K9= for our 3925. For the 2900 series I belive its L-FL-29-HSEC-K9=.




This Discussion