On Cisco Nexus 9508 What is the Maximum VPN Throuhput?

We have ten gigabit interfaces. How much tunneled traffic would the device be able to push?
amigan_99Network EngineerAsked:
Who is Participating?
Blue Street TechLast KnightCommented:
Hi Amigan,

How are you looking at a VPN on the switch? VPNs start/end at the Gateways, which is why mfgs publish different throughputs specifically for VPN and encrypted traffic on Firewalls and not Switches. If you are talking about encrypted traffic on a switch that will be the same throughput rates published by the mfg (https://www.cisco.com/c/en/us/products/collateral/switches/nexus-9000-series-switches/solution-brief-c22-730049.html) as encryption processing only occurs at the source/destination side. Your switch can push a ton of traffic; see under Table 1 in my link above. Here is a performance testing report for more details: https://www.cisco.com/c/dam/en/us/products/collateral/switches/nexus-9000-series-switches/cisco-report-nexus-9508.pdf

Let me know if you have any other questions!
amigan_99Network EngineerAuthor Commented:
@Blue Street: The 9508 is a core device that does both switching and routing. So we have BGP and OSPF as the routing protocols. Are you saying that VPN is just not a feature on the sup of a 9508? No IPsec, no GRE?
WissamSenior Network EngineerCommented:
Nexus 9508 does not support ipsec vpn tunnel termination.
Or do you mean DCI (data centre interconnect) such as OTV < (BGP) Ethernet VPN (EVPN) >???
Blue Street TechLast KnightCommented:
The bottom-line is that if your device could do this they would most assuredly show it with the traffic bandwidth specs i shared above. But because your device cannot terminated encrypted traffic, but rather disseminate it, the rates I shared apply to all traffic; encrypted or not.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.