Cisco VPN Router Portfolio Large Enterprise and Service Provider

Cat 6500

Cisco 7400

Cat 6500

Cisco 7400

Cisco 7200

Cisco 7140

Cisco 7120

Large Enterprise/Service Provider

© 2003, Cisco Systems, Inc. All rights reserved.

Cisco 7200

Cisco 7140

Cisco 7120

Large Enterprise/Service Provider

© 2003, Cisco Systems, Inc. All rights reserved.

The Cisco VPN Router portfolio adds High-end VPN connectivity with Cisco 7100, 7200, 7400 series routers, and the Cisco Catalyst 6500 IPSec Services module. VPN-optimized routers and Cisco Catalyst 6500 IPSec VPN Services module provide VPN solutions for large-scale hybrid VPN environments where modularity, high performance, and flexibility are required.

Enterprise Size and Service Provider— Cisco VPN Router Details

^-Cisco.com

7120

7140

7140

7200

7400

7200

CAT 6500

Maximum tunnels

2000

2000

3000

2000

5000

5000

8000

Performance (Mbps)

50

85

145

90

120

145

1.9G

Hardware encryption

ISM

ISM

VAM

ISA

VAM

VAM

Yes

• Hardware accelerators deliver enhanced encryption performance

• Hardware accelerators deliver enhanced encryption performance

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN 4.0—3-16

You can use the table in the figure to determine which enterprise model is best for your environment. The table identifies router platforms, and their related hardware encryption accelerator card and maximum throughput. Lab performance numbers are based on the following configuration: 3DES with HMAC-SHA-1, 100% CPU use, and no other services running, such as QoS, NAT, GRE, and so on. Actual network performance varies depending on the services running in each router.

Hardware encryption accelerator cards provide high-performance, hardware-assisted encryption, and key generation suitable for VPN applications. For the enterprise routers, there are three versions:

■ VPN Acceleration Module (VAM)—The VAM for Cisco 7200 and 7100 series routers provides high-performance, hardware-assisted encryption, and key generation. VAM also supports IP payload Lempel-Ziv Compression (LZS) compression services for VPN applications. There are two versions: VAM Service Adapter and VAM Service Module.

Integrated Service Module (ISM)—ISM uses a special slot created for offloading encryption and key generating services within the Cisco 7100 series routers (maximum of one ISM per Cisco 71XX series router).

Integrated Service Adapter (ISA)—ISA is a service adapter that inserts in any open port adapter slot in any Cisco 7200 router and can be used within the single port adapter of the Cisco 7140 router (up to one ISA per Cisco 7140 router or two per Cisco 7200 series routers, and not available on Cisco 7120 router).

The Cisco IPSec VPN Services Module is a high-speed module for the Cisco Catalyst 6500 Series Switch. Incorporating the latest in encryption hardware acceleration technology, the Cisco

IPSec VPN Services Module can deliver up to 1.9 Gbps of 3DES traffic and can terminate 8000 IPSec tunnels.

Continue reading here: IPSec Overview

Was this article helpful?

0 0