Number of VPN clients behind PIX 501, restriction?

[kbehymerisg]

Is there a restriction of how many VPN clients can be behind a PIX 501. Is is just limited by the number of hosts (10, 50, Unlimited)?

[beth-martin]

I don't think there is any restriction.

[jmia]

As per documentation:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080091b18.html

Performance Summary

Cleartext throughput: Up to 60 Mbps

Concurrent connections: 7,500

56-bit DES IPsec VPN throughput: Up to 6 Mbps

168-bit 3DES IPsec VPN throughput: Up to 3 Mbps

128-bit AES IPsec VPN throughput: Up to 4.5 Mbps

Simultaneous VPN peers: 10*

* Maximum number of simultaneous site-to-site or remote access IKE Security Association (SAs) supported

HTH

[Vikas Saxena · Accepted solution]

Hello,

VPN clients behind a PIX. Will you use NAT-T (you have to). This will be limited only to the number of users (normal users) allowed through the PIX. So if you have a 10 or 50 user licence then the VPN connection will be counted into that list.

VPN Client connection through PIX is not IKE tunnels. They are normal UDP500 and UDP4500 peers.

Vikas