Paul, You are talking about 2 entirely different things. The VAC allows you to create additional "VPN" connections. This VPN connection would be a client or another site terminating into the PIX. This traffic between sites or between the user and the PIX would be encrypted. The VAC handles the encryption processing much like a math co-processor.
On the other hand you are talking about the PAT and NAT capabilities of the PIX. I believe that the 515 is rated at somewhere around 125,000 simultaneous sessions through it. The net 515E even has a more powerful processor. I would say that for 100 to 150 users you should have no problems running PAT on a PIX 515 or 515E. Tim CCIE 9015 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paul Sent: Tuesday, April 16, 2002 5:47 PM To: [EMAIL PROTECTED] Subject: PAT, PIX 515 and VPN ..... [7:41662] Cisco say that one gloabal IP address can be used for up to 64,000 local addresses .... I want to use the same method for 100 - 130 predominantly web-browsing end-users .... through a PIX 515. Has anyone had any experience of this .. and does anyone forsee any problems !!! this is the first time I have done this and I don't want to make any basic mistakes :) Also .... The PIX 515 can have a VAC installed to allow up to 2000 similtaneous VPN connections at any one time ..... but .. how many sessions can the PIX 515 manage on its own, without a VAC ?????? Any help or suggestions will be greatly received ... Kind regards .. Paul .... Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41678&t=41662 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
