The CRS317 can route between VLANs and switch between 10G ports at wire speed. Use it for all your internal VLANs and L3HW offload will work fine.
The limitation in your setup will be the 2004's processor. Every connection from the 2004 to the 317, be it Layer 2 or Layer 3, will be CPU-bound. The 2004 will have a hard time pushing more than 10-15 Gbps one way. I maxed one out at 19Gbps full duplex with zero firewall filter rules and only a couple routes using the SFP28 ports only. You will definitely not get 25Gbps of Internet data through the 2004.
There does seem to be a little less CPU utilization if traffic is coming in on one of the SFP28 ports and going out the SFP+ ports. I'd recommend leaving your ISP connection on the SFP28 port it's in, and connecting just one port on the CRS317 to the second SFP28 port on the 2004. Then connect all your devices that need to operate at full 10Gbps to each other on the 317.
If you're planning to use more than about 3-5Gbps through the 2004 (with firewall filters and decent routing tables), you've got the wrong router.
Without knowing more about your setup and what you hope to accomplish, that's about as far as I can recommend.
The limitation in your setup will be the 2004's processor. Every connection from the 2004 to the 317, be it Layer 2 or Layer 3, will be CPU-bound. The 2004 will have a hard time pushing more than 10-15 Gbps one way. I maxed one out at 19Gbps full duplex with zero firewall filter rules and only a couple routes using the SFP28 ports only. You will definitely not get 25Gbps of Internet data through the 2004.
There does seem to be a little less CPU utilization if traffic is coming in on one of the SFP28 ports and going out the SFP+ ports. I'd recommend leaving your ISP connection on the SFP28 port it's in, and connecting just one port on the CRS317 to the second SFP28 port on the 2004. Then connect all your devices that need to operate at full 10Gbps to each other on the 317.
If you're planning to use more than about 3-5Gbps through the 2004 (with firewall filters and decent routing tables), you've got the wrong router.
Without knowing more about your setup and what you hope to accomplish, that's about as far as I can recommend.
Statistics: Posted by sirbryan — Tue Dec 31, 2024 7:03 pm