Does MAG 6610 support 20,000 concurrent users in HA?

[michael.saw_]

Hi,

Does MAG 6610 support 20,000 concurrent users in HA? 

If yes, how is it done? 

Understand the BOM will be a 2 x MAG6610 & 4 x SM-360, is 20,000 concurrent user possible to be supported on a single URL?  

[zanyterp_]

---

@michael.saw wrote:
Hi zanyterp,

In the mentioned diagram, we want to achieve 20,000 concurrent users on HA.
We want to run Active/Passive in HA.

Is load-balancer required? (Y/N)

---

Yes, a load balancer is required OR you will need to manually manage the connection between the two different active/passive configurations.

[jayLaiz_]

Hi Michael,

You are right, a single URL in HA Cluster will support upto 20000 concurrent Users for SSL VPN

i.e 2 MAG6610 and  4 SM360

http://www.juniper.net/us/en/products-services/security/mag-series/mag6610/#overview

Thanks,

Jay

[michael.saw_]

Thanks Jay!

How do we configure/combine 2 x SM-360 to form a logical unit to server 20,000 users?
Anyone can share the printscreen on this?

Is there a kb or doc link on this?

[jayLaiz_]

Hi Michael,

we can do active active clustering with 2 sm360 blades

Or, we can have two 2 x SM360 in HA cluster and use a load balancer to do active active clustering for the 2 active passive SM360 clusters

I could not find a kb or doc link on this.

Thanks,

Jay

[michael.saw_]

Hi jay and all,

In a pair of MAG6610, each with 2 x SM-360, does it support 20,000 concurrent user license?
If we have 1 active 6610 (with 2 x SM-360) and 1 passive 6610 (with 2 x SM-360), do we actually need a load balancer here?

Is there a network diagram available to illustrate or explain this?

[zanyterp_]

For active/passive clustering, a load balancer is not needed. To answer your question, though, can you let us know if the SM360s are clustered together (all or paired per chassis)?

[michael.saw_]

Hi zanyterp,

Here's the network diagram (simplified):

 Do we need to insert a load-balancer here?

[zanyterp_]

a load balancer would be best, but you could run without it if needed as long as you can transfer the connection between sites as needed if running dual active/passive sites. in your diagran are you wanting to send users between all four boxes or 2 clusters of two boxes each?

[michael.saw_]

Hi zanyterp,

In the mentioned diagram, we want to achieve 20,000 concurrent users on HA.
We want to run Active/Passive in HA.

Is load-balancer required? (Y/N)