Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco2811 VPN performance

Could you teach the following?

・Headquarters:  Cisco2811(x2台) [Active/Standby,Redundant configuration]
・Branch office: Cisco892 (160 branch office companies)
・Communication network:     Arcstar IP-VPN (NTT Communications)
・Routing Protocol: BGP-4
・Communication requirement: IPSec, Short-Packet
・Line band:
     Headquarters  = 10Mbps
     Branch office = 10-100Mbps、

The number is 200 VPN Tunnels in a standard specification.
However,When 160(VPN Tunnels) branch offices access the headquarters,can the
Cisco2811 endure the load?

■Anxiety point
・The performance decreases extremely according to the load with a high CPU.

Please give results in the Cisco2800 series.


Re: Cisco2811 VPN performance

Did you use the on-board VPN engine?

In general, VPN traffic should not cause high CPU since it is processed by haredware accelerator engineer.

If you conside of performance issue, you might think of using AIM VPN module.

New Member

Re: Cisco2811 VPN performance

Thank you for the answer immediately.

It is assumed to use the on-board VPN engine.
In conclusion, is it a thing said that processing is difficult in the on-board VPN engine ?
We also were examining the proposal of the vAIM VPN module.
When we also had the problem in the performance of the on-board VPN engine , the proposal of the AIM VPN module was examined.
Should I propose to the Customer use the AIM VPN module or Cisco3900 Series when examining it from the performance?