Limitations on site to site VPN connections using Cisco 837s and PIX

[mitchen]

Hi,

We have a number of remote sites with Cisco 837s installed, with IPSEC tunnels terminating on our PIX515E at Head Office.

We also have a number of site to site VPNs between some of the Cisco 837s.

As the number of connections is steadily growing, I wondered if anyone could give me an indication of the maximum number of connections I can have before we will start to see performance problems on this kit?

i.e. what are the limitations on number of site to site VPN connections on the Cisco 837?

And what are the limitations on number of VPN connections on the PIX515E?

Any advice or information that can be offered on the above would be appreciated.

Thanks.

[m.sir]

Do you have unrestricted licence for 515E?? if yes you can have up to 2000 VPN peers, check following doc

http://www.cisco.com/application/pdf/en/us/guest/products/ps2030/c1031/ccmigration_09186a008007d065.pdf

Regarding 837 you can have up to 10 tunnels...check following document (table 5)

http://www.cisco.com/en/US/netsol/ns340/ns394/ns171/netbr09186a00801f0a72.html

Hope that helps

M.

[mitchen]

Thanks, that info is very useful.

However, we have a Restricted license for our PIX515E - what are the implications of this?

Also, on some of our Cisco 837s we already have more than 10 site to site tunnels. So, presumably, you are allowed to configure more than the stated maximum of 10 but performance could then suffer?

Any suggestions as to what I should look out for to check what impact the large number of IPSEC tunnels is having?

Thanks.