Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.


Cisco VPN concetrators and # concurrent connections assistance

Need help from gurus with expertise in Cisco VPN concentrators.

I have 4 Cisco VPN concentrators 3030 running the latest code in load-balancing mode.

These VPNCs sit behind a pair of Checkpoint NGx R65 gateways capable of pushing 10Gbps

throughput. Our internet connection is a 200Mbps pipe. I verified that I can push

200Mpbs over the Internet without any issues. We use the VPNCs for remote access VPN

using Cisco VPN client version

According to the documentation from Cisco, the VPNc 3030 can handle up to 1500 concurrent

session. However, what I have found is that once the VPNc gets to about 150 sessions, it

stops accepting new connections. In other words, I am maxed out at 600 total concurrent

sessions on 4 Concentrators. I need to support about 3000 users but can not go beyond

600 concurrent sessions.

Anyone able to get the VPNc 3030 accepting more than 150 concurrent sessions? If so, how?



Re: Cisco VPN concetrators and # concurrent connections assistan

What happens when the 151st user tries to connect? Are there any errors logged? Check to see what value you have configured under the following:

Configuration | System | General | Sessions


Re: Cisco VPN concetrators and # concurrent connections assistan

I am not seeing any un-usual stuffs in the log of the VPNc but I know that the whole

infrastructure of the VPNc could not scale pass 600 concurrent connections. I can not re-produce this in the lab because there are no tools out there to simulate that many VPN connections.

How does Cisco simulate more than 600 remote access IPsec connections? Thanks.

Cisco Employee

Re: Cisco VPN concetrators and # concurrent connections assistan

How many SEP modules do you have in the VPN 3030? This model support 1500 Simultaneous IPsec Users with max device memory and SEP-E modules.

Please refer to link for more details -

There are traffic generator tools like IXIA/Spirent which are generally used to simulate connections.

CreatePlease to create content