On the Cisco 3745, the AIM-VPN/HP supports a maximum of 1,800 tunnels. The recently released AIM-VPN/EPII and AIM-VPN/HPII further extends the encryption performance of the Cisco 3700.
These modules offers hardware accelerated DES/3DES and the new AES (Advanced Encryption standard) encryption at speeds up to 90-Mbps on the Cisco 3745 (max based on 1400 byte packet size).
In addition the AIM-VPN/EPII and AIM-VPN/HPII support hardware-assisted layer-3 compression services
where bandwidth conservation may lower network connection costs. The AIM-VPN/EPII on the Cisco 3725
supports a maximum of 8,000 tunnels, and the Cisco 3745, with the AIM-VPN/HPII supports a maximum of
10,000 tunnels. On regards to the split-tunneling implementation, this applies to VPN remote access tunnels only. It is basically achieved by enabling an ACL command under the crypto client configuration. The ACL is dynamically loaded on the VPN Client, and specifies exactly the networks to be permitted for
encryption. The rest of the traffic is sent unencrypted. I am including a sample configuration for routers performing EzVPN, which I guess you are not interested on but applies the same for software
VPN clients. I am sure it will give you a good idea of how to configure it on the VPN server since:
Configuring Cisco IOS Easy VPN Client Mode with Split Tunneling
<http://www.cisco.com/en/US/customer/netsol/ns110/ns170/ns171/ns27/networking_solutions_white_paper0
9186a00801890f6.shtml>
