PIX 515 VPN concurrent tunnels?

[stakano]

I'm trying to find out how many VPN (remote and site-to-site) sessions a PIX 515 can support with no accelerator cards.

Anybody know?

[pdentico]

That would depend on how busy these links will be.

We have a 515 on a T-1 that is supporting about 15 full-time site to site links. Granted there's not a huge amount of traffic between sites, but our cpu utilizations never go above 20% And that was when I did several file copies to several offices simultaneously.

[stakano]

So in other words, the 515 will not reject VPN links after a certain number?

No hard number limits? Just on the utilizations?

Just want to confirm.

Thanks.

[pdentico]

No there is no hard limit. If you anticipate a lot of traffic you can get the VPN accelerator card for it.

[mmedwid]

How do you know what your CPU utililzation is on a PIX 515?

[shabib.syed]

"sh cpu usage "

Also if you have a PDM configured, you can get a real time chart of CPU usage , and lots of other stuff.TCP connection, xlate etc etc