Re: OT: IPsec throughput over 4 Gbps

From: Mohammad Moghaddas <moghaddas.it_at_gmail.com>
Date: Sat, 1 Sep 2012 19:24:03 +0430

Hi Brian,
You mean that I can use 3750X platform plus 10G module and MACsec?
Is it as secure as IPsec?

On Sat, Sep 1, 2012 at 6:42 PM, Brian McGahan <bmcgahan_at_ine.com> wrote:

> Is it an Ethernet link? If its already point to point layer 2 you could
> look into running MACsec instead of IPsec.
>
> HTH,
>
> Brian McGahan, CCIE #8593 (R&S/SP/Security)
> bmcgahan_at_INE.com
>
> Internetwork Expert, Inc.
> http://www.INE.com
>
> On Sep 1, 2012, at 6:05 AM, "Ryan West" <rwest_at_zyedge.com> wrote:
>
> > 5585-x with SSP60, 5gbps capable.
> >
> > Sent from handheld
> >
> > On Sep 1, 2012, at 8:38 AM, "Mohammad Moghaddas"
> > <moghaddas.it_at_gmail.com<mailto:moghaddas.it_at_gmail.com>> wrote:
> >
> > Thanks for your quick response Ryan.
> > What about ASA?
> > Is there any other solutions out there? Even from another vendor than
> Cisco?
> >
> >
> > On Sat, Sep 1, 2012 at 4:47 PM, Ryan West
> > <rwest_at_zyedge.com<mailto:rwest_at_zyedge.com>> wrote:
> > It's going to be expensive, look at your options in the ASR line. Afaik,
> none
> > of the G2's are going to push, even unencrypted.
> >
> > Sent from handheld
> >
> > On Sep 1, 2012, at 8:12 AM, "Mohammad Moghaddas"
> > <moghaddas.it_at_gmail.com<mailto:moghaddas.it_at_gmail.com>> wrote:
> >
> >> Hi there.
> >> I need to run IPsec between two directly connected points with fiber,
> but
> >> the traffic throughput will be about 4 Gbps.
> >> Only IPsec will be run on these two points and no other protocols (no
> >> routing, no pbr, no nat, no qos, nothing)
> >> Is there any option except using 7600 series plus IPsec SPA?
> >> Is it possible on 3900 plus HSEC? But I didn't find any 10G module for
> >> these routers. And what about 2900?
> >> Sharing your experiences will be appreciated.
> >>
> >> Best Regards.
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Sep 01 2012 - 19:24:03 ART

This archive was generated by hypermail 2.2.0 : Mon Oct 01 2012 - 06:40:29 ART