[c-nsp] MPLS over GRE/IPSEC

[Mark Tinka]

On Thursday, August 09, 2012 08:31:47 AM Garry wrote:

> According to this Cisco doc:
> http://www.ccsleeds.co.uk/kb/routers/cisco-vpn-throughput
> -comparison-doc.pdf a 7200VXR G2 comes close to doing 1G
> (with 950 for either 3DES or AES),...

The NPE-G2 will never do that for encrypted traffic.

The NPE-G2 can do 950Mbps of aggregated IP/MPLS traffic with 
no ACL's or QoS, at about 90% CPU utilization and 0% packet 
drops assuming no microbursts. I know, I did it.

With only 10% CPU to spare, no way it will do 950Mbps of 
encrypted traffic.

> Alternatively, an ASA 5580-20 is rated at doing a maximum
> of 1G VPN ... albeit, not with any MPLS (unless the
> higher boxes have something in there now)

As mentioned before, the ASR1000 provides the best mix of 
oomph and IP ability.

Cheers,

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20121001/15cb2ebb/attachment.sig>