How many IPSec Tunnels an ASA 5500 series supports

Hi All,
I tried looking in ASA documentations but unable to find out that how many IPSec Tunnels can be terminated to an ASA cluster. I have 5545 running only two IPSec Tunnels so far but need to terminate 18 sites all up and would like to confirm how many tunnels we could terminate? Is there a limitaion to it?
Thanks heaps
Shan

Yes, there is a limit. But its far away from your requirement. On the 5545-X you can terminate 2500 VPN-Peers:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf
Sent from Cisco Technical Support iPad App

Similar Messages

1921 Router Q: How many IPsec tunnels will it support?

Sorry if this isn't the spot for hardware questions... I need to know how many IPsec VPN tunnels one Cisco1921 can support reliably. Haven't had any luck sifting through documentation on the web.
Thanks in advance for any help!

The SEC-K9 permanent licenses apply to the Cisco 1900, 2900, and 3900 ISR G2 platforms; these licenses limit
all encrypted tunnel counts to 225 tunnels maximum for IP Security (IPsec), Secure Sockets Layer VPN (SSL
VPN), a secure time-division multiplexing (TDM) gateway, and secure Cisco Unified Border Element (CUBE) and
1000 tunnels for Transport Layer Security (TLS) sessions.
The SEC-K9 license limits encrypted throughput to less than or equal to 85-Mbps unidirectional traffic in or out of
the ISR G2 router, with a bidirectional total of 170 Mbps. This requirement applies for the Cisco 1900, 2900, and
3900 ISR G2 platforms. The SEC-K9 permanent licenses apply to the Cisco 1900, 2900, and 3900 ISR G2 platforms; these licenses limit
Thanks
Ajay

How we archieve configuration for Cisco ASA 5500 series appliances

Hi,
We need to archieve configuration for Cisco ASA 5500 series appliances.
We have Cisco works LMS 3.0.1.
Device package installed is 4.2
Any help would be appricated.
Thanks in advance.
Samir

Hi ,
Thanks for your answer.
Right now we are using TACAS to login in to the ASA. That means we need single username and password to login via
Cisoworks. Am I correct ?
Waiting for your reply.
thanks,
Samir

Multiple IPSEC tunnels on ASA 5505

Configuring Multiple IPSEC tunnels on ASA 5505
Hi,
I need to configure 2 diffrent type of IPSEC tunnels on my ASA 5505. 1st one is static ipsec tunnel already configured between HO to site A and 2nd one is dynamic to be configure between HO to site B since site B does not have static IP so I have to configure dynamic ipsec vpn.
I have following clarification
1. After configuring dynamic ipsec Is my existing static ipsec tunnel will work simultenously?
2. can I apply different crypmap on the same outside interface? if not then what setting i need to do to make this work?
3. Do i need to create 1 more Nat0 or can i add in existing ACL which i have already created for previous.
kindly help me on this
Thanks in advance
Subhan Shaikh
France Telecom

Configuring Multiple IPSEC tunnels on ASA 5505
Hi,
I need to configure 2 diffrent type of IPSEC tunnels on my ASA 5505. 1st one is static ipsec tunnel already configured between HO to site A and 2nd one is dynamic to be configure between HO to site B since site B does not have static IP so I have to configure dynamic ipsec vpn.
I have following clarification
1. After configuring dynamic ipsec Is my existing static ipsec tunnel will work simultenously?
2. can I apply different crypmap on the same outside interface? if not then what setting i need to do to make this work?
3. Do i need to create 1 more Nat0 or can i add in existing ACL which i have already created for previous.
kindly help me on this
Thanks in advance
Subhan Shaikh
France Telecom

How many EoIP tunnels at the same time? (One Anchor -- HA Pair )

Hi Experts,
With AP SSO, there should be two CAPWAP tunnels between an AP and the HA controller pair at the same time. Is it correct?
Then how many EoIP tunnels between the internet anchor controller and the foreign controller HA pair at the same time?
Thanks
Cedar

Hi Cedar,
in AP SSO, only single CAPWAP tunnel maintan at a time & see the below reference for details.
http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bd3504.shtml
There is only one CAPWAP tunnel maintained at a time between the APs and the WLC that is in an Active state. The overall goal for the addition of AP SSO support to the Cisco Unified Wireless LAN was to reduce major downtime in wireless networks due to failure conditions that may occur due to box failover or network failover.This allows the access point (AP) to establish a CAPWAP tunnel with the Active WLC and share a mirror copy of the AP database with the Standby WLC. The APs do not go into the Discovery state when the Active WLC fails and the Standby WLC takes over the network as the Active WLC.
in the same sense, EoIP tunnel limitation will be 71 for a anchor controller. See below
https://supportforums.cisco.com/thread/2123756
HTH
Rasika
*** Pls rate all useful responses ****

How many users does a ASA5505-BUN-K9 support

I know it is a stupid question.
I say the answer is ten. That means ten hosts can be behind the firewall and hit the internet. The eleventh doesn't get to go out.
I'm being told by a coworker that the "10" in the part number refers to the number of IPsec VPN peers.
Who's right?
I say if you want an unlimited number of users on the inside to be able to get to the internet, you need the ASA5505-SEC-BUN-K9
Thanks in advance!
Mfg. Part: ASA5505-SEC-BUN-K9
Mfg. Part: ASA5505-50-BUN-K9
Mfg. Part: ASA5505-BUN-K9
Cisco ASA 5505 10-User Bundle includes 8-port Fast Ethernet switch, 10 IPsec VPN peers, 2 Premium VPN peers, Triple Data Encryption Standard/Advanced Encryption Standard (3DES/AES) license
ASA5505-BUN-K9

Hi,
Below is a table of the licenses of ASA 5505 from Ciscos site.
It would seem the Part you are referring to is the one with 10 users
The Unlimited one seems to be the ASA5505-UL-BUN-K9 but without the extra features of ASA5505-SEC-BUN-K9
Table 1. Recommended Cisco ASA 5500 Series Business Edition Solutions
Cisco ASA 5505 Solution Description
Firewall/VPN Performance
Part Number
Cisco ASA 5505 10-user bundle
Includes 10-user license, 8-port Fast Ethernet switch, stateful firewall, 10 IPsec VPN peers, 2 SSL VPN peers, 3DES/AES license, and 1 expansion slot
150 Mbps/100 Mbps
ASA5505-BUN-K9
Cisco ASA 5505 50-user bundle
Includes 50-user license, 8-port Fast Ethernet switch, stateful firewall, 10 IPsec VPN peers, 2 SSL VPN peers, 3DES/AES license, and 1 expansion slot
150 Mbps/100 Mbps
ASA5505-50-BUN-K9
Cisco ASA 5505 unlimited user bundle
Includes unlimited user license, 8-port Fast Ethernet switch, stateful firewall, 10 IPsec VPN peers, 2 SSL VPN peers, 3DES/AES license, and 1 expansion slot
150 Mbps/100 Mbps
ASA5505-UL-BUN-K9
Cisco ASA 5505 Security Plus bundle
Includes Cisco ASA 5505, unlimited users, 8-port Fast Ethernet switch, stateful firewall, 25 IPsec VPN peers, 2 SSL VPN peers, stateless Active/Standby high availability, dual ISP support, DMZ support, 3DES/AES license, and 1 expansion slot
150 Mbps/100 Mbps
ASA5505-SEC-BUN-K9
Source:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html
- Jouni

How many devices can I have in my support profile?

How many devices can I have in my support profile? I have 24 and can not add any more. I just tried to add a new iPhone and it says the serial number, "We're sorry, but this serial number is either invalid or it is for Apple software or accessories. If you are trying to register Apple hardware other than an accessory, please check your information and try again."

Never having seen that question before, I tried to find some information - could not find anything unfortunately. So, unless someone else has a better suggestion, my recommendation is to use this form:
http://www.apple.com/support/feedback/
Send them your question - or, if you are covered by Applecare or regular warranty, simply give them a call and ask.
24 Devices....... hmmmm, I'm green with envy!

How many of the codd's rules are supported by oracle?

hai any body of you please tell me how many of the codd's rules are supported by oracle.....?

as far as i remember
oracle follows 11 of the 12 rulesCare to name the one you think is missing?
Taking the Wikipedia definition of Codd's 12 Rules (there are of course thirteen of them), this is what we find:
Rule 0: The system must qualify as relational, as a database, and as a management system.
This is a little circular, and there are people who argue over whether Oracle (or any other existing RDBMS) is truly relational
Rule 1: The information rule
Oracle stores its information as values in column positions within rows of tables.
Rule 2 : The guaranteed access rule
Oracle has primary keys.
Rule 3: Systematic treatment of null values
Many view this rule as Codd's biggest mistake but undeniably Oracle does treat nulls systematically.
Rule 4: Active online catalog based on the relational model
SELECT * FROM USER_TABLES; QED
Rule 5: The comprehensive data sublanguage rule
Oracle's implementation of ANSI SQL satisifies this one.
Rule 6: The view updating rule
Oracle allows us to update key-preserved views.
Rule 7: High-level insert, update, and delete
Oracle has set-based insert, update, and delete.
Rule 8: Physical data independence
Tick in the box.
Rule 9: Logical data independence
Tick in the box (we can argue about LOB storage as a special case).
Rule 10: Integrity independence
Well of course Oracle does this, much to the annoyance of our chums in the OO application building world.
Rule 11: Distribution independence
yep, unless we are so boorish as to expose our database links in the FROM clause instead of using synonyms...
Rule 12: The nonsubversion rule
Oracle does this alright (This is why it's a bad idea to use triggers to enforce relational integrity instead of foreign key constraints).
Cheers, APC

How many digital voice ports can Cisco 3663 support ?

How many digital voice ports can Cisco 3662 support ?
They said "Medium complexity Codecs: 360 (E1)/288 (T1) and High-complexity Codecs: 180 (E1)/144 (T1) "in Cisco 3660 voice gateway data sheet .
But another document said you just configured 4E1 on a Cisco 3660 router .
Which one is true ?

Hi,
There are some other issue except physically accepted number of voice port.
http://www.cisco.com/en/US/products/hw/routers/ps259/products_data_sheet09186a00800921ed.html
page will give you better idea. Even though you can install many voice ports into a router , there is other limits you encounter.
Bets Regards

How many VGA monitors a new Mac Pro Support?

hello! sorry for bad english! writing through a translator. tell me how many monitors can be connected to a mac pro 2013-14. examined the information - say, you can connect two monitors via passive dvi adapter and four through the vga adapter or six monitors through the vga adapter. Please help, since you can not buy 6 monitors display port or thunderbolt. already have 6 monitors dvi/vga, but I'm afraid to buy a mac pro, because monitors can not connect. Thank you friends!

I want to connect 6 vga or dvi monitors.
I'm sorry, translation via google translate
Mac pro ordered, paid money. Now I worry that I won't be able to connect 6 vga monitors. I already have 6 vga of monitors, don't want to buy 6 thunderbolt monitors
thanks!!!
PS VGA adopters are all active. It means mac pro supports six vga monitors?

Does the WLC 5500 Series support LLDP?

We have 2 WLC 5508s running v7.0.98.0 and 70+ 1230, 1240, & 1250 series LWAPs. We are currently enabling LLDP because we will be installing some non-Cisco switches in the near future. Does the WLC5508 and the access points it controlls support LLDP?

Hi David:
The Data Sheet for the 5500 series wireless LAN controllers is at
http://tools.cisco.com/squish/b7D77
That data sheet does not currently list LLDP (as LLDP) or IEEE 802.11AB as supported protocols in the product as it sits today.
I would encourage you to contact your Cisco SE, Cisco account team or Cisco authorized wireless reseller, and let them know you think that this support would be valuable to the wireless LAN controllers. The "sales side of the house" has procedures in place to gather and accumulate input from the customers they serve, and forward it to the respective business units within Cisco for possible inclusion in future releases of Cisco's products.
Sincerely,
Rollin Kibbe
Network Management Systems Team

How many external displays does the 15 inch support?

I spend 90% of my time at a desk developing, using multiple monitors. My current Windows system can support up to 4 displays, normally I run with 3. I was wondering how many external displays one can hook up to the 2.3GHz Macbook Pro. I need at least 3 displays while still having a thunderbold for external drives and eithernet. Does the Mini DisplayPort to Dual-Link DVI Adapter allow splitting the single to two different monitors? Other then the Thunderbolt display, is there a way to get multiple monitors out of one Thunderbolt port?

From http://support.apple.com/kb/SP690 -> "Simultaneously supports full native resolution on the built-in display and up to 2560 by 1600 pixels on up to two external displays, both at millions of colors".
But there may be ways of driving three monitors - maybe someone with a Retina Display model will jump in. I know that on my 15" 2011 model, I can only drive two Apple Thunderbolt Displays.
Good luck,
Clinton

How many LUNs does an Solaris Host can support ?

Hi ,
Anyone can share, how many storage LUNs does an Solaris Host can support? There is any limits on this.?
Regards
Siva

It probably depends at least some on the type of HBAs, the driver, topology, and most likely other things as well. Instead of dealing with thousands of LUNs on the OS side, I would highly recommend you have your SAN team start provisioning meta devices instead, to cut down on the number of devices (if you are lucky enough to have a SAN team that is). My company allows me to be the EMC and Solaris engineer, and in return all they ask is that I only collect pay for one of the two....

How many devices (iPods) does Wi-Fi sync support simultaneously in iOS5?

I have 3 iPod Touch 3gen/4gen in my house. They are setup and all work with WiFi sync individually but I can only get two to show up at any one time in iTunes and I'm not sure how it manages to decide which iPod to show and which one to not show. Is two the maximum number of devices to show in iTunes 5 via Wi-Fi at once? I want to make sure that they all sync at least once a day or so. If you have multiple devices are they 'rotated' somehow by iTunes or am I gonna be stuck connected the 'odd iPod out' (which varies from time to time) via cable to PC?.
I want to pick up two more touches which may make the issue even more confusing. I'd like to get it settled for three before I buy my other two.
WIndows 7, latest iTunes. IPod firmware all up to date and all are setup in iTunes and in the iPod's settings to sync via Wi-Fi. Again, all work individually but only two show up on the left hand column in iTunes.
THanks!! Happy Halloween!!

Post to http://www.apple.com/feedback/ if you are unhappy. This is just a user to user forum.
In the meantime, read this tip and find out if the features you desire are still available under 10.5:
https://discussions.apple.com/docs/DOC-2551
If not, many other webhosts exist on http://www.comparewebhosts.com/ and the software Chronosync many of the same features, if not with as user friendly an interface.

How many Hard Drives can a G4 DA Support?

Hi. I'm putting an old G4 466MHz Digital Audio to use as a file server but I want to make sure I don't over strain the power supply or something worse.
I currently have a Sonnet Tempo SATA card in one PCI slot running 2 hard drives (1.5tb and 160gb) as well as two IDE hard drives of 80gb. The book disk is one of the SATAs.
Would I be able to fit as many as 8 hard drives (2 per card x 4 cards) or would that be too much of a drain? Would it help if one of the IDE drives was used as the boot disk leaving all the SATAs for storage or would that make no difference?
Thanks.

Hi-
4 drives is all that the machine was meant to use.
One might squeeze another drive or two in, but more than power, the heat of the drives will probably be the problem.
Overheating a PSU makes reliable power production more difficult, and with multiple drives demanding that power, the problem compounds quickly.
It doesn't matter native ATA or SATA.
All the drives pull power.
Go all SATA, and use 1.0 TB drives (or bigger) and you won't need 8 drives......

How many IPSec Tunnels an ASA 5500 series supports

Similar Messages

Maybe you are looking for