When monitoring a Cisco ISR 4331 Integrated Services Router, you may encounter log messages such as:
%BW_LICENSE-4-THROUGHPUT_MAX_LEVEL_EXCEEDED: The current throughput level is 100000 kbps
Even with a Gigabit ISP link, the router may throttle traffic at 100 Mbps due to its default software-defined throughput limit. This guide explains how to evaluate your current throughput, understand the Performance and Boost license options, and unlock the full potential of your ISR 4331 without purchasing new hardware.
Table of Contents
- Part 1: Diagnosing Throughput Limitations
- Part 2: Performance vs. Boost License
- Part 3: License Activation Steps
- Part 4: Verification and Monitoring
- Part 5: ROI and Procurement Considerations
- Part 6: Risks and Best Practices
- Part 7: Frequently Asked Questions (FAQ)

Part 1: Diagnosing Throughput Limitations
The Cisco ISR 4331 uses multi-core Control, Data, and Services Plane CPUs. Default throughput is capped at 100 Mbps using an aggregate shaper.
Default Throughput Table:
| Platform | Default Max Throughput | Data Plane Cores |
| ISR 4331 | 100 Mbps | 2 x PPE + 1 x I/O Core |
Check current throughput:
Router# show platform hardware throughput level
The current throughput level is 100000 kb/s
- 100000 kbps → Default
- 300000 kbps → Performance License applied
- Boost → Boost License applied
Part 2: Performance vs. Boost License
Cisco offers two main options to remove the throughput limit:
- Performance License: Increases aggregate throughput from 100 Mbps to 300 Mbps. Ideal for branch offices with standard DIA circuits.
- Boost License: Disables the shaper entirely, unlocking throughput up to 2 Gbps+. Recommended for hubs or heavy encryption workloads.
License Comparison Table:
| License Type | Max Throughput | Use Case |
| Performance License | 300 Mbps | Branch office, moderate traffic |
| Boost License | 2 Gbps+ | Hub sites, heavy encrypted traffic |
Part 3: License Activation Steps
A. Software and Licensing Requirements
- IOS XE 16.7.1+ for Performance/Boost activation
- Right-To-Use (RTU) or Smart Licensing depending on software version
- Traditional license: upload
.licfile and install
B. Activation Commands
Activate Performance License (300 Mbps):
Router(config)# platform hardware throughput level 300000
% Please write mem and reload % The config will take effect on next reboot
Activate Boost License (uncapped throughput):
Router(config)# platform hardware throughput level boost
Router# write memory
Router# reload
Part 4: Verification and Monitoring
Verify throughput level:
Router# show platform hardware throughput level
The current throughput level is 300000 kb/s (or Boost)
Monitor actual data-plane consumption:
Router# show platform hardware qfp active datapath utilization
... Output shows total bps consumed
Indicators of exceeding licensed bandwidth:
- Consistently capped total egress traffic
- High TailDrop packets in
show platform hardware qfp active statistics drop - Syslog warnings approaching licensed bandwidth
Part 5: ROI and Procurement Considerations
Upgrading licenses is typically faster and more cost-effective than hardware replacement:
| Option | Max Throughput | Deployment Time | Risk |
| Performance/Boost License | 300 Mbps – 2 Gbps+ | Hours | Low |
| New ISR 4400 / Catalyst 8300 | 2 – 10 Gbps | Weeks | Medium |
Router-switch provides global in-stock hardware and fast quotation support to minimize procurement delays.
Part 6: Risks and Best Practices
- Aggregate egress traffic may hit limits if not properly configured with QoS.
- IPsec throughput may remain limited due to CPU constraints.
- Licensing activation requires planning: Smart Account or RTU licenses must match IOS-XE version.
Router-switch guidance can assist with license verification and risk mitigation.
Part 7: Frequently Asked Questions (FAQ)
What is the throughput of ISR 4331?
Base throughput: 100 Mbps. With Performance License: 300 Mbps. With Boost License: ~2 Gbps aggregate.
What is the IPsec throughput of a Cisco ISR 4331?
Encryption is CPU-intensive; expect ~420–500 Mbps encrypted throughput with Boost license. Consider ISR 4431 for higher VPN capacity.
What is the throughput of 4431 Boost License?
Unlocks approximately 4 Gbps aggregate routing throughput, with IPsec performance near 1 Gbps.
What is the throughput of Cisco ISR 1000 series?
Varies by model; e.g., ISR 1100-4P ~350 Mbps encrypted throughput, ISR 1100-8P 500+ Mbps. Limited hardware-based performance.
For global hardware availability, technical guidance, and rapid deployment support, you can consult Router-switch or check live pricing via IT-Price.

Expertise Builds Trust
20+ Years • 200+ Countries • 21500+ Customers/Projects
CCIE · JNCIE · NSE7 · ACDX · HPE Master ASE · Dell Server/AI Expert





















































































































