topic Re: How many tunnels is able to do ASA 5545? in Network Security

How many tunnels is able to do ASA 5545?

Zagam — Fri, 21 Feb 2020 17:12:09 GMT

How many tunnels IPSec is able to do ASA 5545?

I have a doubt regarding how many tunnels IPSec I can do with ASA 5545, I mean I have an outside interface on ASA connect to interface router. In this only link how many tunnels could i do?

For example:

ASA Outside 10.10.10.10---------------------------------10.10.10.11 Router Interface.

Only one?

Regards!

Re: How many tunnels is able to do ASA 5545?

Rob Ingram — Fri, 07 Jun 2019 17:30:58 GMT

Hi,

The ASA 5545-X supports 2500 VPN tunnels, reference here. Even though you only have 1 IP address, the sequence number used on the crypto map is used to distinguish between the different peers. So I don't see why in your scenario you could not configure up to 2500 VPN tunnels.

HTH

Re: How many tunnels is able to do ASA 5545?

Zagam — Fri, 07 Jun 2019 17:34:32 GMT

Hi RJI!

It is not that I can not, I have not yet implemented it, I only had the doubt, but when you say 2500 tunnels do you mean tunnels or sessions?

Re: How many tunnels is able to do ASA 5545?

Rob Ingram — Fri, 07 Jun 2019 17:47:08 GMT

Reference document says "IPsec VPN Peers" = 2500, so each peer would be 1 tunnel, so therefore 2500 tunnels supported.

Re: How many tunnels is able to do ASA 5545?

Marvin Rhoads — Sat, 08 Jun 2019 12:28:47 GMT

Sessions is generally used to refer to remote access VPN. Since almost nobody still uses the old IPsec IKEv1, we generally equate sessions with SSL VPN sessions for remote access clients. In that case there is a separate limit and you require AnyConnect licenses for your sessions. In the case of SSL VPN, the limit is also 2500.

So you could have up to 2500 SSL VPN sessions (assuming licenses are installed) in addition to 2500 IPsec site-to-site VPNs concurrently active.

Reference Table 3 here:

https://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html

Re: How many tunnels is able to do ASA 5545?

Mohammed al Baqari — Sun, 09 Jun 2019 07:02:06 GMT

Check asa datasheet

https://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/datasheet-c78-733916.html