Configuring VPN Session Limits
You can run as many IPSec and WebVPN sessions as your platform and license for the security appliance supports. To view the licensing information for your security appliance, enter the show version command in global configuration mode. The following example shows the command and the licensing information excerpted from the output of this command:
hostname(config)# show version
Cisco Adaptive Security Appliance Software Version 7.1(0)182 Device Manager Version 5.1(0)128
Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 100
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Security Contexts : 10
GTP/GPRS : Enabled
VPN Peers : 750
WebVPN Peers : 500
This platform has an ASA 5520 VPN Plus license.
To limit the maximum number of active IPSec VPN sessions to a lower value than the security appliance allows, enter the vpn-sessiondb max-session-limit command in global configuration mode. This limit affects the calculated load percentage for VPN Load Balancing.
hostname(config)# vpn-sessiondb max-session-limit number_of_sessions hostname(config)#
For example, if the security appliance license allows 750 IPSec sessions, and you want to limit the number of IPSec sessions to 500, enter the following command:
hostname(config)# vpn-sessiondb max-session-limit 500
hostname(config)#
To remove the session limit, use the no version of this command.:
hostname(config)# no vpn-sessiondb max-session-limit hostname(config)#
To limit WebVPN sessions to a lower value than the security appliance allows, use the vpn-sessiondb max-webvpn-session-limit command in global configuration mode. To remove the session limit, use the no version of this command.
hostname(config)# vpn-sessiondb max-webvpn-session-limit number_of_sessions hostname(config)#
For example, if the security appliance license allows 500 WebVPN sessions, and you want to limit the number of WebVPN sessions to 250, enter the following command:
hostname(config)# vpn-sessiondb max-webvpn-session-limit 250
hostname(config)#
To remove the session limit, use the no version of this command.:
hostname(config)# no vpn-sessiondb max-webvpn-session-limit hostname(config)#
For a complete description of the features available with each license, see Appendix A, Feature Licenses and Specifications.
Continue reading here: Configuring IPSec Remote Access Tunnel Group IPSec Attributes
Was this article helpful?