Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
cisco 3640 router
- Thread starter thetam
- Start date
I'd assume so. It shows up in the config docs for the 3600:
simple way to check is to go on your router and at the terminal config prompt see if you get a crypto command.
Router(config)#crypto ?
simple way to check is to go on your router and at the terminal config prompt see if you get a crypto command.
Router(config)#crypto ?
VPN can be added via an IOS upgrade/change, however on the 3640 there is by default no hardware accelerated VPN. I think there is (was?) a VPN Accelerator NM module for the 3600 routers that handled the VPN encryption/decryption. You can do this in software it just isn't as efficient.
All the new ISR routers have VPN acceleration hardware built-in (I think, certainly my 877 has).
HTH
Andy
All the new ISR routers have VPN acceleration hardware built-in (I think, certainly my 877 has).
HTH
Andy
I didn't realize there were modules for VPN stuff.
Yes, the one you would want to get is the NM-VPN/MP. As has been stated, however, you do not NEED it.
it is EoS just like the 3640.
Here is a description from a reseller website:
"The data encryption modules, AIM-VPN/HP for the Cisco 3660 and NM-VPN/MP for the Cisco 3620 and 3640, are hardware Layer 3 (IPSec) encryption modules and provide DES(56-bit) and 3DES(168-bit) IPsec encryption for multiple T1s or E1s of bandwidth. This level of performance is a dramatic increase over that achievable when running IPSec in software on the main CPU of the Cisco 2600 or 3600. These products also have hardware support for DH, RSA, and DSA key generation. In addition to encryption, the data encryption AIM is intended to increase the security of passwords and various encryption keys over that provided by IOS software and the platform hardware. Specifically, these products have been submitted for Level 2 of the Federal Information Processing Standard (FIPS) 140-1 in general as well as more stringent levels for some parameters such as Level 3 tamper resistance.
Yes, the one you would want to get is the NM-VPN/MP. As has been stated, however, you do not NEED it.
it is EoS just like the 3640.
Here is a description from a reseller website:
"The data encryption modules, AIM-VPN/HP for the Cisco 3660 and NM-VPN/MP for the Cisco 3620 and 3640, are hardware Layer 3 (IPSec) encryption modules and provide DES(56-bit) and 3DES(168-bit) IPsec encryption for multiple T1s or E1s of bandwidth. This level of performance is a dramatic increase over that achievable when running IPSec in software on the main CPU of the Cisco 2600 or 3600. These products also have hardware support for DH, RSA, and DSA key generation. In addition to encryption, the data encryption AIM is intended to increase the security of passwords and various encryption keys over that provided by IOS software and the platform hardware. Specifically, these products have been submitted for Level 2 of the Federal Information Processing Standard (FIPS) 140-1 in general as well as more stringent levels for some parameters such as Level 3 tamper resistance.
- Status