2

Can I create a local ip pool with a /22 mask to support 1022 VPN hosts on an ASA or limited to a /24 mask per subnet

4

ASA VPN address pools can be a /22 (or larger) and function correctly.

The limitation of how many of those addresses can actually be active at any one time is based on the hardware in use. The 5520 supports up to 750 concurrent VPN peers per the datasheet.

| improve this answer | |
-1

I dont see a reason why it wouldnt work with 22 prefix. Not sure the ASA has the hardware to deal 1000 vpn connections.

| improve this answer | |
  • 5520 will support up to 750 VPN peers, so there will be some unused addresses in the pool, but the /22 will work fine. – cpt_fink Oct 24 '14 at 15:10
  • @cpt_fink, you should post that as an answer and not a comment to another answer. – YLearn Oct 24 '14 at 15:35
  • Was just clarifying the answer's uncertainty about the # of vpn connections... i'll repost as an answer though. – cpt_fink Oct 24 '14 at 15:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.