CISCO2921-SEC/K9 vs CISCO2921-HSEC/K9

[jacob6000]

I know the ISR2 series included VPN hardware acceleration but there is a "HSEC" which included an "advanced" encryption card. I'm just trying to get my head around it. Is the HSEC bundle really needed over the standard SEC bundle?

I need to support a 50meg Internet connection with 4 Site-to-Site VPNs and use of the firewall, nat and QOS on each router. I'm looking at the Cisco2921-SEC/K9 bundle. Does this sound about right?

Thank you,

[jacob6000]

Anybody used the HSEC bundle?

[Collin Clark]

If your internet link is 50mb, then a 2921 (non-HSEC) can handle the encryption/decryption.

[johnnylingo]

I don't know if I'd necessarily agree with that.  The standard SEC license comes with a software-based rate limiter of 85 Mbps each way.  If the protocol does not handle loss/retransmissions very well, throughput can easily plummet.  Testing in a lab environment with two 2921s, I saw speeds drop to 25 Mbps. 

[SOcchiogrosso]

Info on the HSEC license can be found here in regards to what it is and what t does for you. It allows for addition through for encrypted traffic nasa higher number of VPN tunnels

http://www.cisco.com/en/US/prod/collateral/routers/ps10536/qa_c67_606268.pdf

Sent from Cisco Technical Support iPhone App

[Parvesh Paliwal]

As far as 50 mbps traffic is concerned, you can go with any of the options - HSEC is an improvement to the original SEC.

As it removes certain restrictions regarding VPN tunnels and bandwidth limits.

--

Parvesh