300-730 · Question #212
An engineer is configuring WebVPN. When the configuration went live, no more than 10 users could connect at the same time. During the investigation, the additional user received an error that it…
The correct answer is C. ASA(config-group-policy)# vpn-simultaneous-logins 20. The vpn-simultaneous-logins command in group-policy configuration mode controls how many concurrent VPN sessions a user can have. The default value is 3, so increasing it to 20 resolves the connection limit issue.
Question
Options
- AASA(config)# vpn-simultaneous-logs 20
- BASA(config-group-policy)# vpn-simultaneous-logs 10
- CASA(config-group-policy)# vpn-simultaneous-logins 20
- DASA(config)# vpn login-limit 20
How the community answered
(38 responses)- A11% (4)
- B3% (1)
- C84% (32)
- D3% (1)
Why each option
The vpn-simultaneous-logins command in group-policy configuration mode controls how many concurrent VPN sessions a user can have. The default value is 3, so increasing it to 20 resolves the connection limit issue.
vpn-simultaneous-logs is not a valid Cisco ASA command - the correct keyword is vpn-simultaneous-logins - and global configuration mode is not where this per-user session parameter is configured.
While the group-policy context is correct, vpn-simultaneous-logs is a misspelled command name and setting the value to 10 would not increase the existing limit of 10.
The vpn-simultaneous-logins command, applied under group-policy configuration mode, sets the maximum number of simultaneous VPN logins allowed for users in that policy. The default value is 3, and raising it to 20 permits more concurrent WebVPN sessions. This is both the correct command name and the correct configuration context on Cisco ASA.
vpn login-limit is not a valid Cisco ASA command syntax for controlling the number of simultaneous VPN sessions.
Concept tested: ASA WebVPN simultaneous logins group policy configuration
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/V/cmdref4/v.html
Topics
Community Discussion
No community discussion yet for this question.