AnyConnect vs hardware IPSec VPN

[ke_tam1987]

Hello,

We have a client that currently has an ASA5510 at the head office with 871 routers at multiple branch locations. The branch connections connect to the head office via a dynamic IPSec tunnel. At the moment, VPN connections to the head office are very flakey, where occasionally we can't access the head office and would have to power-cycle the ASA in order to get it going again.

We're looking to upgrade the ASA to a 5512-X, and we're looking at several options. Should we be looking at replacing the 871 with 881 routers and configure them with dynamic IPSec tunnels like before, or should we be looking at implementing AnyConnect for the branch locations. Each branch location has between 2-4 computers.

I'm aware of the licensing requirements of AnyConnect.

[inam.ullah78]

Hi,

What is the CPU and memory utilization on the ASA5510? and how many VPNs are terminated on the ASA?

Thanks,

Inam

[ke_tam1987]

CPU is < 10% and memory around 70%. Peak VPN connections is probably around 12-15

[inam.ullah78]

Hi,

By any chance can you share the configuration of both the ASA and the Cisco871 router?

Regards,

Inam

[ke_tam1987]

Attached are the configs of the ASA and 871.

Thanks.