06-11-2019 11:33 PM
I am trying to figure out, how ASA calculates its VPN Peak Concurrent value. I am using ASA 5510, version 9.1... I was checking number of users connect thru Any Connect VPN.. I found Peak Concurrent value shows 247.. wondering how does it calculate? Is this showing the maximum number seen by the firewall from the day VPN established till now or is it calculating with some time frame? Attached is a screen shot.. Any answer would be greatly appreciated.
Thanks.
Vinay Jaiswal
Solved! Go to Solution.
06-12-2019 01:42 AM
it calculated the day vpn established. see when the tunnel comes up and you issue a command show crypto ipsec sa detail and show crypto ipsec sa. these command give you the brief output of spi values and other. also in ASA vpn there is a default time for vpn key to rekey (or it can be either fine tune).
according to cisco document.
VPN Peak Concurrent value Highest number of sessions of all types that were concurrently valid sessions (active + inactive) since the ASA was last booted or reset.
06-12-2019 01:42 AM
it calculated the day vpn established. see when the tunnel comes up and you issue a command show crypto ipsec sa detail and show crypto ipsec sa. these command give you the brief output of spi values and other. also in ASA vpn there is a default time for vpn key to rekey (or it can be either fine tune).
according to cisco document.
VPN Peak Concurrent value Highest number of sessions of all types that were concurrently valid sessions (active + inactive) since the ASA was last booted or reset.
06-12-2019 01:58 AM
Thanks for confirming @Sheraz.Salim , I had the same thought. Appreciate your time for answering this question.
06-12-2019 01:59 AM
Thanks for confirming @Sheraz.Salim , I had the same thought. Appreciate your time for answering this question.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide