A bit confused about RB750 Gr3 IPSec

RouterOS General
1

Hi guys,
On a mt wiki, there is a table which hardware encryption type is supported by particular router.
https://wiki.mikrotik.com/wiki/Manual:IP/IPsec

At rb750 Gr3 there are four asterisks: ****. At legend bellow table, there is explanation at four asterisks: 3DES only, but in table there is noted, that Gr3 supports also AES CBC md5, sha1 and sha256…

I don’t have gr3 on my table to test it. Would someone clarify, if possible with real life experience, how does perform gr3 with aes cbc sha1 and sha256 encryption…
Thanks…

2

It was a little misleading. I updated the wiki page. Both 3DES and AES-CBC is supported in hardware on RB750Gr3.

3

I have one RB750Gr3 connecting to a 3011 using L2TP/IPSec and it uses SHA256 and aes-256-cbc. You cannot see the H under installed SA in winbox (bug) but if you use console or webfig I can see that the hardware offload is working. I have a 100 Mbit connection to it and I can easily push that connection full without the RB750Gr3 having any issues.
Before I had issues with 3011 as it did not have any hardware offload but that is solved now :slight_smile:

4

Are you sure that Hardware AEAD is greyed out in SA detail screen status bar? Otherwise you can see H flag by enlarging the first grid column.

5

Thank you for quick response…

6

Jesus Christ I use Excel to much. I’m so use to dubbel clicking on the column separator that it did not occur to me that I could slide it. :slight_smile:
Yes after sliding it a bit to the right I can see the H. So no bug in Winbox but it would be nice it they extended the column so it would show at least 2 characters default :slight_smile: