Cisco VPN Internal Service Module for Cisco ISR G2: high-performance VPN encryption module with hardware acceleration and Suite B cryptography support.
The Cisco VPN Internal Service Module (VPN ISM) is a hardware module designed for Cisco ISR G2 routers to offload VPN encryption tasks. It supports strong encryption standards including Suite B cryptography and integrates with Cisco IOS Software. The module is compatible with specific Cisco ISR G2 router models and provides performance improvements for encrypted traffic.
It supports up to 500, 2000, or 3000 IPsec tunnels depending on the router model, and includes hardware-based encryption with support for AES, DES, 3DES, and various key exchange and integrity algorithms. The module is designed for branch-office deployments and integrates with Cisco’s management tools and licensing system.
| Form Factor | ISM |
|---|---|
| IPsec Support | DES, 3DES, AES (128-, 192-, 256-bit) in CBC and GCM modes |
| Key Exchange | Diffie Hellman (DH) and Elliptic-Curve Diffie Hellman (ECDH) |
| Digital Signature | RSA and ECDSA |
| Data Integrity | MD5, SHA-1, SHA-2, AES-GMAC |
| Maximum Tunnels | 500 on 1941, 2000 on 2900, 3000 on 3900 |
| Cisco IOS Software Version | 15.2(1)T1 or later |
| Power Consumption | 20W |
| Dimensions (H x W x D) | 0.85 x 4 x 6.1 in. (2.2 x 10.2 x 15.5 cm) |
| Operating Temperature (1941/2901) | 32 to 104°F (0 to 40°C) |
It is compatible with Cisco 1941, 2900, and 3900 Series Integrated Services Routers (ISRs) that support the ISM card slot.
Up to 500 on Cisco 1941, 2000 on Cisco 2900, and 3000 on Cisco 3900 Series.
Cisco IOS Software Version 15.2(1)T1 or later.
It supports DES, 3DES, AES (128-, 192-, 256-bit) in CBC and GCM modes, RSA, ECDSA, MD5, SHA-1, SHA-2, and AES-GMAC.