On 2005-09-27, aslom blabbed:
Yes, we currently have the better part of 50 or so on a pix 515. The cpu usage is currently sitting at about 15-30%. If you were going to get into the 100 vpn range I'd suggest monitoring the traffic carefully on the 515 and perhaps going up to a 525. It would depend how heavy the traffic load is going to be. Another thing you need to look into is a failover configuration if you're getting into that many hosts and you need any serious degree of reliability.
Hi Guys,
My company needs to implements multiple VPN channels. We have Cisco PIX-515. We hanve configured 2 VPN channels but both are ended also on PIX firewals appliances. The new need may address even up to 100 VPN connection.
My first doubt - is it possible to configure PIX to support so much VPN connections without configuring each one-by-one? RADIUS server inside... some kind of Easy VPN server...?
Second doubt - is it possible to configure those VPN channels from non-Cisco-based-IOS (routers, other PIX'es) or Cisco VPN clients, for ex. small VPN routers from D-Link, Linksys, Arlotto, etc...? And authenticate them automaticaly as mentioned in my first doubt - preshared key, digital cert, RADIUS?
Thanks for any suggests, aslom
second question:
You should be able to connect to any other device that supports ipsec. Cisco to Linux and freebsd works just fine.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required