ASA 5540 - 3000 simultaneous IPsec connections

[stefan.radovanovici]

Hi all,

We are planning to use an ASA 5540 to terminate about 3000 IPSec connections. The maximum supported IPsec VPN Peers for this platform ist 5000, so this should be ok in theory.

What is a bit unclear to me is what exactly happens when (for whatever reason) all 3000 clients try to connect at once ? Perhaps it's not at once but depending on timers this could mean 3000 incoming IPsec connection within 10-20 seconds.

Will the the ASA cope with it ? I can't find any info regarding this on CCO. It's also not that easy to test/simulate. Anyone has any experience with this ?

Thanks,

Stefan

[stefan.radovanovici]

Anyone ?

[stefan.radovanovici]

I would really appreciate if one of the Cisco employees reading this forum could help. I am pretty sure this must've been tested internally, some sort of info must exist.