I have a client with two Cisco 7120's that are connecting two branch offices with a IPSec tunnel encryped with DES. Because of new security standards they need to be upgraded to 3DES. Since neither router currently supports 3DES, what will I need to add to upgrade both routers for 3DES? Does an ISM card add the 3DES feature as well as hardware acceleration, or will an IOS upgrade suffice.
Both offices currently have 40 hosts, with occasional remote printing and ftp utilized via the tunnel, therefore, the load is nominal.
What you require is an IOS upgrade not a hardware upgrade. The ISM does not add much in the way of functionality it merely allows the router to outsource the math involved in crypto. There is no visible change incidentally in router performance between DES/3DES
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...