Community discussions

 
w0lt
Member
Member
Topic Author
Posts: 484
Joined: Wed Apr 02, 2008 2:12 pm
Location: Minnesota USA

RB3011 IPSEC Hardware Encryption?

Sun Jan 08, 2017 7:37 pm

Does the RB3011 have hardware encryption ability and is it enabled?

Thanks,

-tp
MTCNA - 2011

" The Bitterness of Poor Quality Remains Long After the Sweetness of Low Price is Forgotten "

Image
 
kiler129
Member Candidate
Member Candidate
Posts: 226
Joined: Tue Mar 31, 2015 4:32 pm
Contact:

Re: RB3011 IPSEC Hardware Encryption?

Mon Jan 09, 2017 1:47 am

It has this in CPU but it's not enabled AFAIK - http://wiki.mikrotik.com/wiki/Manual:IP ... encryption
 
dhoulbrooke
newbie
Posts: 48
Joined: Sun Apr 19, 2015 7:24 am
Location: Whakatane, New Zealand

Re: RB3011 IPSEC Hardware Encryption?

Mon Jan 09, 2017 7:39 am

Does the RB3011 have hardware encryption ability and is it enabled?
Not yet unfortunately:

http://forum.mikrotik.com/viewtopic.php?t=83478#p512868
http://forum.mikrotik.com/viewtopic.php ... 02#p542641
 
josu
Member Candidate
Member Candidate
Posts: 152
Joined: Wed May 27, 2015 6:20 pm

Re: RB3011 IPSEC Hardware Encryption?

Mon Jan 09, 2017 12:28 pm

Is there any plan to implement it?

It will great to have it in the next release.

Regards.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5931
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: RB3011 IPSEC Hardware Encryption?

Mon Jan 09, 2017 12:29 pm

As it was mentioned in other topics, there will be no HW acceleration in ROS v6.
 
Ascendo
Frequent Visitor
Frequent Visitor
Posts: 67
Joined: Sun Sep 09, 2012 12:06 pm

Re: RB3011 IPSEC Hardware Encryption?

Tue Jan 10, 2017 8:19 pm

How much IPSEC throughput can it do currently (software only)?
 
efaden
Forum Guru
Forum Guru
Posts: 1711
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

Re: RB3011 IPSEC Hardware Encryption?

Sun Jan 15, 2017 10:10 pm

Curious myself....
 
infused
Member
Member
Posts: 305
Joined: Fri Dec 28, 2012 2:33 pm

Re: RB3011 IPSEC Hardware Encryption?

Wed Jan 18, 2017 8:45 am

bugger all.
 
chriscolden
just joined
Posts: 9
Joined: Fri May 04, 2018 3:41 pm

Re: RB3011 IPSEC Hardware Encryption?

Sat Jun 30, 2018 11:16 am

I'm seeing about 16Mb over the internet at about 7 or 8% cpu over all. The internet the other end is limited at 20Mb upload so I cannot physically receive any faster anyway.
 
petrz
just joined
Posts: 7
Joined: Sun Apr 09, 2017 6:40 am

Re: RB3011 IPSEC Hardware Encryption?

Tue Sep 18, 2018 12:08 pm

What's new in 6.43.1 (2018-Sep-17 06:53):

Changes in this release:
*) rb3011 - added IPsec hardware acceleration support;
 
zorrua
newbie
Posts: 30
Joined: Sun Sep 17, 2017 4:32 pm

Re: RB3011 IPSEC Hardware Encryption?

Tue Sep 18, 2018 10:48 pm

What's new in 6.43.1 (2018-Sep-17 06:53):

Changes in this release:
*) rb3011 - added IPsec hardware acceleration support;
Great!

Is there any example about how to configure a IPSec tunnel between 2 RB3011 devices?

Kind regards.
 
User avatar
honzam
Forum Guru
Forum Guru
Posts: 2287
Joined: Wed Feb 27, 2008 10:27 pm
Location: Czech Republic

Re: RB3011 IPSEC Hardware Encryption?

Tue Sep 18, 2018 11:06 pm

As it was mentioned in other topics, there will be no HW acceleration in ROS v6.
Really? :)
LAN, FTTx, Wireless. ISP operator
 
sindy
Forum Guru
Forum Guru
Posts: 3809
Joined: Mon Dec 04, 2017 9:19 pm

Re: RB3011 IPSEC Hardware Encryption?

Wed Sep 19, 2018 4:53 pm

Is there any example about how to configure a IPSec tunnel between 2 RB3011 devices?
There is nothing specific for the case of two RB3011, simply use the setup for any two Mikrotik devices mentioned in the manual. If hardware support for the authentication and encryption algorithms chosen is available on the device, it is activated automatically - it does not need to be switched on, and it cannot be switched off. Which algorithms enjoy hardware support can be found in this table in the same manual.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
gcxo
just joined
Posts: 3
Joined: Wed Apr 15, 2015 11:57 pm

Re: RB3011 IPSEC Hardware Encryption?

Mon Sep 24, 2018 1:53 pm

I've install 6.43.1 on a 3011 but the IPSEC HW accelartion does not seem to work, it works fine on 750r3 an 1100ahx2.

Installed SAs of the 3011
cap3011.PNG
Installed SAs of the 1100
cap1100.PNG
One of the conexion is between the 1100 and 3100. On the 1100 side has EH, but on the 3011 has only E.

Any ideas?

Thanks
You do not have the required permissions to view the files attached to this post.
 
bennyh
Frequent Visitor
Frequent Visitor
Posts: 69
Joined: Fri Mar 03, 2017 12:37 pm

Re: RB3011 IPSEC Hardware Encryption?

Mon Sep 24, 2018 2:12 pm

For first sight might the problem is:
* supported only 128 bit and 256 bit key sizes

On your captured picture is see 192 bit size encription keys.
I've install 6.43.1 on a 3011 but the IPSEC HW accelartion does not seem to work, it works fine on 750r3 an 1100ahx2.

Installed SAs of the 3011

cap3011.PNG

Installed SAs of the 1100

cap1100.PNG

One of the conexion is between the 1100 and 3100. On the 1100 side has EH, but on the 3011 has only E.

Any ideas?

Thanks
Last edited by bennyh on Mon Sep 24, 2018 2:14 pm, edited 1 time in total.
 
sindy
Forum Guru
Forum Guru
Posts: 3809
Joined: Mon Dec 04, 2017 9:19 pm

Re: RB3011 IPSEC Hardware Encryption?

Mon Sep 24, 2018 2:14 pm

In the table in the manual, there is a * reference in the row for RB3011, which says

* supported only 128 bit and 256 bit key sizes

In your installed-sa list, I can see "192" in "Encryption Key Size" column. So change the aes key size to either 128 or 256 bits and try again.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
gcxo
just joined
Posts: 3
Joined: Wed Apr 15, 2015 11:57 pm

Re: RB3011 IPSEC Hardware Encryption?

Tue Sep 25, 2018 11:58 am

Thanks!! Setting the default ipsec proposal only to allow 128 or 256 worked.
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 490
Joined: Thu Dec 11, 2014 8:53 am

Re: RB3011 IPSEC Hardware Encryption?

Wed Oct 03, 2018 11:08 am

What's new in 6.44beta14 (2018-Oct-01 12:01):

*) rb3011 - implemented multiple engine IPsec hardware acceleration support;

IPsec throughput table for RB3011UiAS-RM on our products page is updated too.

https://mikrotik.com/product/RB3011UiAS ... estresults

If you experience any stability related issues when running hardware offloaded IPsec on RB3011UiAS-RM, please let us know at support@mikrotik.com

Who is online

Users browsing this forum: MSN [Bot] and 82 guests