Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 2899 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL Site to Site

ViciousMagician1116

Still having issues with ipsec site to site.  have 2 XG's out there connecting via ipsec, one always drops off the ipsec so I have it on SSL now.  However I thought I read that we could only have a limited number of ssl site to site and I will need to add about 8 more remote XG's this summer. 



This thread was automatically locked due to age.
  • +1

    Hey  

    Apologies to hear about your continued IPsec issues. Have you already upgraded to MR8? If so, would it be possible to PM me with information regarding your IPsec connection and Policy configurations along with the output from these logs when this issue occurs. (/log/charon.log and /log/strongswan.log)

    For reference, your hardware is the variable that determines how many VPN tunnels (IPsec or SSL) that you are able to properly support. I've attached a sizing guide (slightly older) that provides a suggestion regarding how many concurrent IPsec and SSL VPN tunnels are able to properly run per device model. Please note that this is a rough estimate and your mileage may vary. 

    Regards,

  • 0 in reply to FloSupport

    Thanks, im just going to move everything over to SSL.  From the guide i think our 310 will be just fine handling it.