Number of Ipsec tunnels supported on a VPN device?

[infosec]

When a VPN device is said to support x number of IPsec tunnels, does this take into account all the SA's created when setting up the secure channel?

So, does encryption for up to 3000 tunnels mean 3000 SA's or is it irrespective of how many SA's are created for the tunnel?

Thanks.

[gfullage]

It takes into account all the SA's for that particular tunnel.

[infosec]

Thanks for the reply.

So to understand fully, a limit of 3000 tunnels on say a 7140 router, would mean a total of only 1000 Ipsec tunnels if 3 SA's were created for each tunnel?