Avaya BayRS Version 14.10 Notice download pdf (Page 18)

Release Notes for BayRS Version 14.10 for the Passport 2430 and Passport 5430

308663-14.10 Rev 01

These algorithms are listed in order of increasing CPU consumption and security:

• MD5

• SHA1

• DES

• DES with MD5

• DES with SHA1

• 3DES

• 3DES with MD5

• 3DES with SHA1

In addition, the key generation and periodic rekeying done by IKE Diffie Hellman

imposes a CPU burden. Therefore, consider the keying intervals for IKE and for

IPsec that you choose during configuration. Less frequent rekeying reduces the

burden on the CPU. Consider rekeying the Phase 1 (IKE) SAs less frequently than

the IPsec SAs.

Finally, the packet size influences the performance of the router. Smaller packet

sizes at a given data rate impose a greater processing load than larger packet sizes.

You can optimize performance by using the information in this section to plan and

manage CPU resources. For example, BayRS IPsec on a BN can fill a 2 Mb/s

WAN pipe with bidirectional DES-encrypted traffic. Conversely, 3DES + SHA1

traffic with aggressive Phase 1 (IKE) and IPsec rekeying (for example,

every 10 minutes) might cause significant performance degradation under heavy

traffic loads.

You might experience SNMP timeouts during periods when the router is carrying

peak loads of protected traffic.

IPsec Executable

To use the IPsec option, you must purchase a separate IPsec CD that contains

either the 56-bit (DES) or both triple DES (3DES) and the DES cryptographic API

executable (capi.ppc) for the BayRS software. Purchase the CD for the router

software version you are running. Follow the instructions included with the CD or

in Configuring IPsec Services to install the IPsec option.

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 41 42

No comments

Avaya BayRS Version 14.10 Notice Page 18