4095, but you have to consider SAR limits. For the PA-T3-A3 it is around 1028. So there is no way you will ever get all 4095 PVC's sending traffic at the same time. I wish Cisco's were more like Juniper's in terms of SAR vs PVC limits. james