Cisco2811 VPN performance

iotoiotoioto · ‎08-27-2010

Could you teach the following?

■Component
・Headquarters: Cisco2811(x2台)　[Active/Standby,Redundant configuration]
・Branch office: Cisco892 (160 branch office companies)
・Communication network:     Arcstar IP-VPN (NTT Communications)
・Routing Protocol: BGP-4
・Communication requirement: IPSec, Short-Packet
・Line band:
     Headquarters = 10Mbps
     Branch office = 10-100Mbps、

The number is 200 VPN Tunnels in a standard specification.
However,When 160(VPN Tunnels) branch offices access the headquarters,can the
Cisco2811 endure the load?

■Anxiety point
・The performance decreases extremely according to the load with a high CPU.

Please give results in the Cisco2800 series.

Yudong Wu · ‎08-27-2010

Did you use the on-board VPN engine?

In general, VPN traffic should not cause high CPU since it is processed by haredware accelerator engineer.

If you conside of performance issue, you might think of using AIM VPN module.

http://www.cisco.com/en/US/prod/collateral/routers/ps5853/data_sheet_vpn_aim_for_18128003800routers.html

iotoiotoioto · ‎08-29-2010

Thank you for the answer immediately.

It is assumed to use the on-board VPN engine.
In conclusion, is it a thing said that processing is difficult in the on-board VPN engine ?
We also were examining the proposal of the vAIM VPN module.
When we also had the problem in the performance of the on-board VPN engine , the proposal of the AIM VPN module was examined.
Should I propose to the Customer use the AIM VPN module or Cisco3900 Series when examining it from the performance?