I am looking at a system with some 30 SA s, mainly from PIX 501 or 506 terminating on a central VPN3030. What should I expect in tunnel performance for 3DES?
I have seen various figures for the the VPN3030 ranging from a total of 9 Mbps to 15 Mbps. I am seeing significant congestion delays and lost traffic at much lower loadings, arround 100kbps per SA ie ~ 3 Mbps total through the central site. All traffic from the sites is sent down the SA and is a mix of FTP, Telnet and traffic from Oracle Java applet. Is this normal? Am I wasting my time with the VPN3030 should I be deploying an IPSEC VPN module in a CAT6500?
We use a VPNc 3030 and terminate many different devices on it inc, pix, asa, routers etc. We havent noticed any problems with throughput over the tunnels.
We use an older SEP module and it handles 3DES encryption fine. You could check to make sure that the SEP module/s are enabled for your tunnels and that there is no bandwidth policies or default bandwidth policies in place??
The 3030 is a VPN platform designed for medium- to large-sized organizations with bandwidth requirements from full T1/E1 through T3/E3 (50 Mbps maximum performance) and up to 1500 simultaneous sessions.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...