what is the limit for number of `crypto ikev2 authorization policy` in CSR1kv

[manoghos]

Hi Experts,

I am using Cisco IOS XE Software, Version 16.08.01 image and doing remote authorization for flexvpn using per user(email) based authorization policy as shown below.

crypto ikev2 authorization policy user1@cisco.com
pool ACPOOL-LQL4M8F1ED49N6P5CKINF6C85C
aaa attribute list AAA-attr-LQL4M8F1ED49N6P5CKINF6C85C
!

Do we have any known limit for the number of authorization policies?

[Rob Ingram]

Hi,
Sorry no idea, I've never seen any reference to limits....but if that is a concern then normally that is when using RADIUS based central aaa authorization would be advisable, reducing configuration complexity on the hub routers.

HTH

[manoghos]

Hi RJI, great to see you here again.
yeah .. external RADIUS/TAC server could be a better option but as we have some device limitation and we can use only aaa local authentication and authorization on CSR

[Nidhi]

Please post this in CSR community

thanks,

Nidhi 

[manoghos]

Thanks, Nidhi Is it not visible there?