Re: OT: IPsec throughput over 4 Gbps

Is it an Ethernet link? If its already point to point layer 2 you could look into running MACsec instead of IPsec.

HTH,

Brian McGahan, CCIE #8593 (R&S/SP/Security)
bmcgahan_at_INE.com

Internetwork Expert, Inc.
http://www.INE.com

On Sep 1, 2012, at 6:05 AM, "Ryan West" <rwest_at_zyedge.com> wrote:

> 5585-x with SSP60, 5gbps capable.
>
> Sent from handheld
>
> On Sep 1, 2012, at 8:38 AM, "Mohammad Moghaddas"
> <moghaddas.it_at_gmail.com<mailto:moghaddas.it_at_gmail.com>> wrote:
>
> Thanks for your quick response Ryan.
> What about ASA?
> Is there any other solutions out there? Even from another vendor than Cisco?
>
>
> On Sat, Sep 1, 2012 at 4:47 PM, Ryan West
> <rwest_at_zyedge.com<mailto:rwest_at_zyedge.com>> wrote:
> It's going to be expensive, look at your options in the ASR line. Afaik, none
> of the G2's are going to push, even unencrypted.
>
> Sent from handheld
>
> On Sep 1, 2012, at 8:12 AM, "Mohammad Moghaddas"
> <moghaddas.it_at_gmail.com<mailto:moghaddas.it_at_gmail.com>> wrote:
>
>> Hi there.
>> I need to run IPsec between two directly connected points with fiber, but
>> the traffic throughput will be about 4 Gbps.
>> Only IPsec will be run on these two points and no other protocols (no
>> routing, no pbr, no nat, no qos, nothing)
>> Is there any option except using 7600 series plus IPsec SPA?
>> Is it possible on 3900 plus HSEC? But I didn't find any 10G module for
>> these routers. And what about 2900?
>> Sharing your experiences will be appreciated.
>>
>> Best Regards.
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Sep 01 2012 - 09:12:56 ART