Number of Users (Client VPNs)

[RichardL]

Hi All,

Just a quick question; does the MX series (MX64 in particular) have limit on the number of authenticated users/devices that can be registered? 

Can't find this anywhere on the datasheets or documentation so assuming there is not limit...can anyone confirm?

Thanks in advance.

Regards,

Richard

[Spooster]

Hi RichardL,

Number of client VPN supported on MX64 is 50.

https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mx_sizing_guide.pdf

[RichardL]

Thank you Spooster,

Does this limit (50) relate one of the below, or both?

- The number of registered devices/users

- The number of active VPN connections

If there are 13 MX64 devices on a network would this mitigate the limit of 50 users? Would the number of client VPNs (assuming active connections) supported then change to 650?

Regards,

Richard

[Spooster]

Hi RichardL,

Yes, limit related to both is 50. And this limit is per device.

[RichardL]

Much thanks Spooster, 

If there are more than 50 users and 13 MX64 devices at 13 different sites, can 50+ users be connected to the same network (i.e. via an MX64 device located at a different site)? 

Regards,

Richard

[Spooster]

Richard,

If you have 13 MX64 in your network then the total number of users can be 50x13. But at one site/location, it cannot be more than 50.

Hope this will give you more clarification. Thanks for the Kudos 🙂

[merakiel]

Hi,

For a mx64 with 50 client vpn is there a required bandwidth ? Like 100mbps is required for 50 client vpn. Thank you.

[cmr]

@merakiel there isn't a specific requirement, it depends on what the users will be accessing over the VPN link.  If you have 50x users accessing Citrix then a 10Mb connection would probably suffice, but if they are all accessing GPU accelerated VDIs then 100Mb might not be enough.  If the users have fat clients then the data usage will be bursty so I'd say 50Mb would usually be enough, but as always, the more the merrier!

[dalbra]

What is the maximum on the MX84 or MX100?

[cmr]

As per the sizing document linked to by @Spooster the MX84 supports 100 tunnels and the MX100 supports 250.  

This is the number of encrypted connections whether they be SD-WAN between MXs, or client VPN users.

If you don't have MX-MX links then the number simply covers the VPN client users.  If you do have MX-MX links then you need to deduct their site to site links first.