Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kinmun
New Contributor II

site-2-site VPN connections

i am using fortigate 300D HA with fortiOS 5.4.4.

currently I have 2 site-2-site vpn connection with 3rd parties.

how many site-2-site VPN connections can this firewall support without impacting the performance of the unit??

am evalauting whether to setup site-2-site for backup ipvpn lines.

1 REPLY 1
ede_pfau
SuperUser
SuperUser

Oodles.

Datasheet says 2000, so a couple of 100 tunnels should be OK.

 

IF !

If the encryption/decryption is offloaded to the NP6 - so AES128, AES256, SHA256 should all be accelerated but SHA512 probably is not. There is a guide to "Acceleration" somewhere on docs.fortinet.com if you need the exact details.

If VPN traffic is not offloaded it must be handled by the CPU, and while the 300D is not weak it may well be brought down with a couple of dozens of IPsec tunnels.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors