Angelika,There's no way, it was enforced to ensure you don't hit bottlenecks in the platform.sorry,Xavier

Angelika,You're right, I hadn't noticed that, sorry.  And they say "The Cisco 1941, 2901, and 2911 already have maximum encryption capacities within export limits."There's no 12.4 IOS for the 29xx. I think the only solution is then to use a 2921.Xavi...

Angelika,'show crypto eli' shows 3200 max ipsec-sessions for the 2911 but the CERM feature makes sure you don't go above 225 if you didn't buy the hseck9 license.hope it helps,Xavier