[c-nsp] How to terminate 100.000 IPsec VPN clients?

[Eugeniu Patrascu]

On Fri, Sep 2, 2011 at 16:55, Florian Bauhaus
<f.bauhaus at portrix-systems.de> wrote:
> Hello,
>
> What would be the best way to terminate 100k IPsec VPN clients?
>
> Use a 6500/7600 with appropriate modules? Put 10 ASA5580-20 in a rack?
> How to manage the whole thing?
> The clients won't make a lot of traffic so throughput isn't really a matter.
>
> I already got a few ideas on how to do this but I would like to know if
> someone else got experience with this and could help me out a bit.
>

Although it's not a Cisco solution, Stoke makes some very nifty
hardware boxes that can hold over 200k ipsec sessions for users in a
single box.