HP-UX IPSec vA.03.00 Performance and Sizing White Paper

9
Figure 7. Comparison of negotiation time for IKEv1 and IKEv2 with PFS off and on
Negotiation time for IKEv1 and IKEv2 with PFS off/on
0
0.5
1
1.5
2
2.5
3
3.5
1 5 10 15 30 50 100 200
Number of SAs established
Time (seconds)
IKEv1
IKEv1 with PFS
IKEv2
IKEv2 with PFS
Test System Configuration
The data reported in this section was derived from tests performed on a system with the following
configuration:
• 1x Itanium 9100 series processor 1.67 GHz, 2 logical processors per socket
• 512MB memory
• 1x 1000 Base-T card
• IPSec Version A.03.00
• OS Version HP-UX B.11.31 (HP-UX 11i v3)
• IKE Authentication Method: Preshared Key
• IKEv1 Exchange Mode: Main Mode
• IKE Policy:
– Encryption: 3DES-CBC
– Integrity: MD5 (IKEv1), HMAC-SHA1 (IKEv2)
– Pseudo-random function: HMAC-SHA1
– Diffie-Hellman group: 2