Not yet unfortunately:Does the RB3011 have hardware encryption ability and is it enabled?
Great!What's new in 6.43.1 (2018-Sep-17 06:53):
Changes in this release:
*) rb3011 - added IPsec hardware acceleration support;
There is nothing specific for the case of two RB3011, simply use the setup for any two Mikrotik devices mentioned in the manual. If hardware support for the authentication and encryption algorithms chosen is available on the device, it is activated automatically - it does not need to be switched on, and it cannot be switched off. Which algorithms enjoy hardware support can be found in this table in the same manual.Is there any example about how to configure a IPSec tunnel between 2 RB3011 devices?
I've install 6.43.1 on a 3011 but the IPSEC HW accelartion does not seem to work, it works fine on 750r3 an 1100ahx2.
Installed SAs of the 3011
Installed SAs of the 1100
One of the conexion is between the 1100 and 3100. On the 1100 side has EH, but on the 3011 has only E.
What's new in 6.44beta14 (2018-Oct-01 12:01):
*) rb3011 - implemented multiple engine IPsec hardware acceleration support;