Tunnel Concentrator

[JoseNet]

Helllo dears

I need to size a solution to concentrate 4Gb throughput and 1000 VPNs client to site. What meraki equipment do you recommend to concentrate this traffic in HQ?.

I saw in datasheet that MX450 support 2Gb VPN torughput, this means support 2Gb each single VPN?.

I pending for your comments

Thanks

Josenet

[DarrenOC]

Hi @JoseNet @I believe that figure is the throughput for each VPN user.

https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mx_sizing_guide.pdf

If I’m wrong then you would have a potential 5000 clients/VPN tunnels all battling to use the 2Gbps throughout then I work that out to 0.4Mbps per client.  You’d be better off running bits of string with tins at either end 🤣

[NolanHerring]

2Gbps VPN is max, not each. You might have to get two of them and have half go to one hub and the other to the second hub. To be honest though I would be surprised to see 2Gbps being hit 😃

[DarrenOC]

So bits of string and tins it is then.

[NolanHerring]

I'll clarify

My understanding is that the 2Gbps VPN Tunnel limitation is aggregate, meaning one person (if there was only one user) has access to all 2Gbps. That person could max it out if they wanted etc.

Math wise yes, if everyone single person was trying to push iPerf or something then they would each get 0.4Mbps, but that's one of those what are the chances scenarios lol.

It's sort of like wireless. The bandwidth is there, use it up. More people that use it at the same time, the less goodput everyone gets.

Unless I'm wrong of course, which happens from time to time.

[DarrenOC]

Hi @NolanHerring , good analogy. So in @JoseNet use case 1000 users sharing 2Gbps each user would receive 2Mbps.

[SopheakMang]

MX450 is the biggest one , if you can go , that would be okay