The crypto-work gets done on the CPU in software, and the CPUs on those switches are not very strong. (data traffic is forwarded by the hardware, only some special pakets (STP, CDP, ...) disturb the CPU; while management traffic must be handled by the CPU) Juergen.