Least cost method to encrypt 100Mbps IPsec or AES 1 armed?

[mmedwid]

What is the lowest cost Cisco device that would let me encrypt 100Mbps using only 1 interface on each end?

[sachinraja]

hello medwid,

Depending on your exact requirement, you can buy a Cisco ISR series router - 1800/2800/3800 with the AIM-VPN card, which can do hardware based encryption. With ISR's i guess this card comes by default. In any case, if u dont have this card, the IPSEC encyption is done on the software, which can reduce the CPU, and give less performance....

Have a look at the following:

IPSec VPN

? The Cisco 1841 Series Module (AIM-VPN/SSL-1) can provide hardware-based IPSec encryption services of 25 and 95 Mbps in the Cisco 1841 (IPSec Internet mix [IMIX] and 1400-byte packets).1

? The Cisco 2800 Series Module (AIM-VPN/SSL-2) can provide hardware-based IPSec encryption services of 30 and 160 Mbps in the Cisco 2801, 35 and 130 Mbps in the Cisco 2811, 90 and 140 Mbps in the Cisco 2821, and 100 and 160 Mbps in the Cisco 2851 (IPSec IMIX and 1400-byte packets).1

? The Cisco 3800 Series Module (AIM-VPN/SSL-3) can provide hardware-based IPSec encryption services of 160 and 185 Mbps in the Cisco 3825 and 190 and 210 Mbps in the Cisco 3845 (IPSec IMIX and 1400-byte packets).

Hope thie helps.. all the best.. rate replies if found useful...

Regards,

Raj

[jackyoung]

Agreed w/ Raj and suggest to use at least 28xx w/ hardware encryption module. If you will have other CPU intensive feature that will be enabled in the routers, you need to consider higher model.

Check below for more info.

http://www.cisco.com/en/US/products/ps6540/products_data_sheet0900aecd804ff58a.html

Hope this helps.

[mmedwid]

Thank-you much. How can I tell if I already have the AIM-VPN/SSL-2 module on my 2821? When I "show hardware" is says:

"1 Virtual Private Network (VPN) Module"

Would that be the AIM-VPN/SSL-2?

[jackyoung · Accepted solution]

You're welcome. Accroding to below link, if there is AIM-VPN module installed at 2821, it should be AIM-VPN/SSL-2, it was because it is the only supporting module in 2821.

http://www.cisco.com/en/US/products/ps6441/products_feature_guide09186a008059d201.html

Moreover, you can use "show crypto engine config" to ensure the AIM VPN module is installed properly. Check below for more info.

http://www.cisco.com/en/US/products/hw/modules/ps2641/products_tech_note09186a008076b147.shtml

Hope this helps.