cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
459
Views
0
Helpful
9
Replies
Highlighted
Beginner

How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 3945 in HA (HSRP)

Hi,

I got a couple of 3945, and I would like to put the routers in Active/Standby using HSRP. I got also a four

FL-SSLVPN100-K9 so 400 licenses VPN SSL.

My doubt is, how to license this VPNs, I have not found any thing clear on cisco.com. If I have an Active/Standby, can I license all 400 VPN SSL to the Active Router, and replicate as a bakcup the four license on the Standby Router?

Or I just need to registers 200 VPN SSL on the Active Router and on the Standby Router the other 200 VPN SSL (losing 200 clients, that only could by used just in case of a failure of the active router)

Yours faithfully,

Esteve

Everyone's tags (5)
9 REPLIES 9
VIP Mentor

How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 3945 i

You have to activate 200 licenses on Router1 and 200 licenses on Router2. The license-information is not synchronized between them. But you don't need to lose any possible sessions as cou can also run an active/active scenario with two HSRP-groups. And on very new software you could even configure IKEv2-Loadbalancing for many routers.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Beginner

How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 3945 i

Thanks Karsten for your quickly response,

I will check the last thing you say about IKEv2-Loadbalancing.

Kind Regards

Esteve

VIP Mentor

How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 3945 i

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-2mt/sec-cfg-clb-supp.html

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Beginner

How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 3945 i

Chess:)

Beginner

Re: How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 39

Hi Karsten,

Just one thing more, do you know with is the maximum of concurrent VPN SSL can run into one 3945? I am very surprise to see that Cisco said that the maximum number of VPNs is 200.

Platform

Licenses Included with High Performance Security (HSEC) Bundles

Maximum Number of Users

Without Advanced Integration Module

With Advanced Integration Module

Cisco UC/SR500, 870, 880, and 890 Series Routers

-

10 users

-

Cisco 1800 and 1900 Fixed Routers

-

25 licensed users

-

Cisco 1841 and 2801 Routers

10 free users

-

75 licensed users

Cisco 1941 and 2901 Routers

-

75 licensed users

N/A

Cisco 2811 and 2821 Routers

10 free users

-

100 licensed users

Cisco 2911 and 2921 Routers

-

100 licensed users

N/A

Cisco 2851 Routers

10 free users

-

150 licensed users

Cisco 2951 Routers

-

150 licensed users

N/A

Cisco 3800 Series Routers

25 free users

-

200 licensed users

Cisco 3900 Series Routers

-

200 licensed users

N/A

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6657/product_data_sheet0900aecd80405e25.html

Yours faithfully,

Esteve

VIP Mentor

Re: How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 39

Yes, the concurent VPN-user-count on the ISR are not that high. But if you need many AnyConnect-users, you should also calculate if an ASA with AnyConnect-Essentials license is less expensive then a router with that many AnyConnect-licenses.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Beginner

Re: How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 39

OK, well it is to late to chenge for ASA...

So there is no way to have more than 200 VPN-SSL on a Router 3945? (just to clirify)

The limitation comes by limitation the CPU, memory, or it's just a Licence limitation? The 3945 brings the Security Bundle...

Thanks for your support karsten

Regards
Esteve

VIP Mentor

How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 3945 i

The maxium of 200 SSL tunnels for the 3925/3945 is also what I'm aware of. The 3925E/3945E is documented to handle up to 500 SSL-tunnels. For IPSec-tunnels the count is mouch higher if you have the HSEC-license (2000 for the 3945).

I assume that it an overall ressource-limitation.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Beginner

Re: How to license 4x100vpn-ssl (FL-SSLVPN100-K9) in Router 39

Thanks, this is all. have a good day!

Regards

Esteve

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards