Can I create a local ip pool with a /22 mask to support 1022 VPN hosts on an ASA or limited to a /24 mask per subnet

2 Answers 2


ASA VPN address pools can be a /22 (or larger) and function correctly.

The limitation of how many of those addresses can actually be active at any one time is based on the hardware in use. The 5520 supports up to 750 concurrent VPN peers per the datasheet.


I dont see a reason why it wouldnt work with 22 prefix. Not sure the ASA has the hardware to deal 1000 vpn connections.

  • 5520 will support up to 750 VPN peers, so there will be some unused addresses in the pool, but the /22 will work fine.
    – cpt_fink
    Oct 24, 2014 at 15:10
  • @cpt_fink, you should post that as an answer and not a comment to another answer.
    – YLearn
    Oct 24, 2014 at 15:35
  • Was just clarifying the answer's uncertainty about the # of vpn connections... i'll repost as an answer though.
    – cpt_fink
    Oct 24, 2014 at 15:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.