max number of L2L tunnels on 3030

[joshw]

According to CCO documentation, they say that 1500 remote users and 500 lan-to-lan tunnels are supported on the 3030. I have a customer who has approx. 100 L2L tunnels configured. When they try to add more, they are receiving an error about not being able to add more users. Can anyone shed light as to how they can hit the 500 mark? Is this done with RADIUS?

[gfullage]

It's not 1500 remote users AND 500 L2L tunnels, it's 1500 maximum IPsec tunnels, but included in that 1500 is 500 maximum L2L tunnels (in other words, if you have 500 L2L tunnels, you can then only have 1000 remote users).

How many users do they have configured? We would certainly not recommend having 1000 users locally configurd on the 3030, some sort of external authentication to Radius/NT/LDAP would be much better for that number of users.

Basically if he's getting the error that he's reached the max, then the 3030 believes it has 1500 users/L2L tunnels configured. If you remove some of the remote users then you should be able to configure additional L2L tunnels.