I’m concerned that a one armed concentrator may not handle my traffic.
I anticipate a half dozen tunnels terminating in my DC. With only one interface on the MX handling traffic it sort of doubles the interface load. What is the realistic throughput I can maintain? I’m used to a typical gateway firewall design where you go in the wan and out the lan or dmz.
Solved! Go to solution.
Have a read through the MX sizing guidelines
https://meraki.cisco.com/product-collateral/mx-sizing-guide/?file
For one client we have an MX100 pair handling 14 Auto-VPNs and they’re handling it fine.
Have a read through the MX sizing guidelines
https://meraki.cisco.com/product-collateral/mx-sizing-guide/?file
For one client we have an MX100 pair handling 14 Auto-VPNs and they’re handling it fine.
MX84 can handle 100 auto vpn connections and max 200 client devices.
I’ve seen clients with about 20 AutoVPN spokes pushing about 150Mbps of traffic through a MX84 configured as a concentrator. The worst the MX performance was hitting was around the 50 mark, so still headroom in it.
Thanks. Trying to get some real world feedback.
How much traffic do you expect? With six VPN-peers they have to push some traffic to hit the gigabit limit. And if you really go to 1 Gig VPN-Throughput, you likely have the MX250 which has SFP+.