On Thu, Nov 18, 2010 at 02:47:35PM -0800, Seth Mattinen wrote: > The ISR series do have onboard hardware crypto, but I don't know offhand > if it can handle a full DS3 worth. > > My first guess is fragment reassembly would probably kill it fast. We're not seeing fragmentation. The MTU of the physical DS3 is arbitrarily large (over 9000) to intentionally avoid this. -cjp