Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

2821 with AIM-VPN/SSL-2 high CPU utilization

I have a 2821 that I am using in a IPSSEC VPN setup and the rotuer is experiencing very high CPU utilization when traffic rates are high (40 Mpbs).

I am concerned because I have another 2821 router using the on-board VPN module and its configuration is almost identical (another spoke on the DMVPN setup) to the 2821 with AIM module but the CPU utilization is drastically lower given similar traffic loads.

The 2821 with AIM module is running 12.4(9)T4. Is there possibly improvement in later code releases?

Anyone have any CPU utilization issues with there AIM modules?

Thanks,

Ralph

2 REPLIES
Bronze

Re: 2821 with AIM-VPN/SSL-2 high CPU utilization

Check if you have configured manual crypto maps in your router as manual keys are not supported in hardware, therefore all crypto will happen in software. Following link may help you

http://www.cisco.com/en/US/docs/ios/12_2/12_2z/12_2zj/feature/guide/gtaimvpn.html#wp1042343

New Member

Re: 2821 with AIM-VPN/SSL-2 high CPU utilization

I believe you are referring to this statement from the link you posted:

Restrictions for DES/3DES/AES VPN Encryption Module

•Rivest-Shamir-Adelman (RSA) manual keying is not supported.

Correct?

My question is do they mean Manual keying = pre-shared keys??

Thanks

960
Views
0
Helpful
2
Replies