Hi Steven,

Under www.cisco.com/go/srnd you can find the below Solution Reference Network Design (SRND) Guide for DMVPN, which gives you the performance data for the various design scenario of DMVPN in Chapter 4, please consider average packet size, crypto chip performance vs bi-directional traffic when trying to match it with your results:

http://www.cisco.com/application/pdf/en/us/guest/netsol/ns171/c649/ccmig ration_09186a008075ea98.pdf

Cheers

Stefan

-----Original Message----- From: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Steven.Glogger@swisscom.com Sent: Tuesday, April 29, 2008 10:05 AM To: swinog@swinog.ch Subject: [swinog] crypto performance of cisco 2800 series vs AIM-VPN/SSL2

hi all

we're troubleshooting some performance issues on a cisco 2801 with onboard crypto engine (not with an additional AIM-VPN/SSL2). the problem is that in the DMVPN setup (crypted tunnel) we have a thruput of around 4mbit with 90% of CPU. according to the cisco specs we should reach 30-40mbit of encrypted traffic... but our tests are ... well.. not that positive...

do you have made similar experiences?

so, does someone has a AIM-VPN/SSL2 for a cisco 2800series around which we could lend out for some days to perform some tests?

greetings

-steven _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog