LAN-to-LAN VPN

dianewalker · ‎05-22-2008

We have two 3005 VPN Concentrators. We setup as Load Balancing. We already setup one LAN-to-LAN connection between these two VPN Concentrators. The LAN-to-LAN connection is connected to the Primary VPN Concentrator. Would you setup another LAN-to-LAN connection to the Primary VPN Concentrator? Is there a limitation of how many LAN-to-LAN connections you can setup on the VPN 3005 Concentrators? We are also running IPSEC on these two VPN Concentrators.

Thanks.

andrew.prince · ‎05-23-2008

Diane,

Just read up on the 3005 from here:-

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5743/ps5749/ps2284/product_data_sheet09186a00801d3b56.html

And it clearly states:-

"Cisco VPN 3005 Concentrator

The Cisco VPN 3005 Concentrator is designed for small to medium-sized organizations with bandwidth requirements up to full-duplex T1/E1 (4 Mbps maximum performance), with support for up to 200 simultaneous IPsec sessions or 50 simultaneous clientless sessions. Encryption processing is performed in software. The Cisco VPN 3005 does not have built-in upgrade capability."

Cisco VPN 3005

Simultaneous IPsec Users - 200

Simultaneous SSL VPN (Clientless) Users - 50

Maximum LAN-to-LAN Sessions - 100

Encryption Throughput - 4 Mbps

Encryption Method - Software

I'd say your OK to go with another few L2L VPN's! BUT I would caution - the encryption is software based, the higher the encryption level the more CPU cycles required, the more memory used!

HTH.