active concurrent AnyConnect connections - what happens if you go over?

[paulcahill]

I tried to look around briefly and couldn't find the answer.

from sho vpn-sessiondb summary:

<snip>

IPsec : 5000 Configured : 5000 Active : 0 Load : 0%
SSL VPN : 25 Configured : 25 Active : 24 Load : 96%

We have hit 25 users before - so what happens if a 26th user tries to connect with anyConnect?

Thanks!

[balaji.bandi]

Technically 26th user will not be able to go through, i tried some time back do not remember the error, but it was rejected.

[Rahul Govindan]

AFAIK, the user with most inactive time gets disconnected and new user connects successfully. Inactivity timer usually starts 5 minutes after no contact with client. 

[mkazam001]

some useful cmds:

sh vpn-sessiondb svc
show vpn-sessiondb anyconnect

regards, mk