Site-to-Site VPN limits

[Chris_Net]

I am trying to find information on Site-to-Site VPN connection limits.  Our company uses Site-to-Site VPN and we have a concern about reaching a possible limit on sites as we continue to expand and add new locations.

Thank you in advance for any information on this.

-Chris

[ww]

No hard limits but here are the tested and recommended max. https://meraki.cisco.com/product-collateral/mx-sizing-guide/

Tunnels count /calculation can be found here  https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/...

[GreenMan]

Remember also that MXs can have a number of functions and the load is cumulative;   a routed mode MX in a HQ  handling (say) 150 concurrently connected VPN clients, whilst also providing Layer-7 firewalling with IPS & AMP protection for a 100 clients on the LAN will practically be able to support fewer site-to-site VPN tunnels and/or provide a lower level of throughput for all those users.

Make sure to use the recommended maximum number of site-to-site VPN tunnels in your calculations, too.

It is possible to monitor overall MX load using Organization > Summary report
https://documentation.meraki.com/MX/Monitoring_and_Reporting/Device_Utilization

[Chris_Net]

Thank you both for your answers as well as providing links to information.  This was very helpful. We went through the recommended amounts and also calculated our ‘Mesh’ type of current connections.  The utilization advice really gave us a way to understand where we are with this and allow us to project forward our grow.

On a minor separate note, the link where the device utilization shows an equation…after scratching my head a bit, I realized that the Meraki documentation has a mistake on the listed equation….they should review that section and correct it.