>Сделайте на асе:
>sh ver
>Лицензия на какое кол-во соединений стоит? Cisco Adaptive Security Appliance Software Version 8.0(4)16
Device Manager Version 6.1(5)57
Compiled on Thu 04-Dec-08 02:09 by builders
System image file is "disk0:/asa804-16-k8.bin"
Config file at boot was "startup-config"
r-ASA up 88 days 4 hours
Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0 : address is 0023.5e15.fe4a, irq 9
1: Ext: GigabitEthernet0/1 : address is 0023.5e15.fe4b, irq 9
2: Ext: GigabitEthernet0/2 : address is 0023.5e15.fe4c, irq 9
3: Ext: GigabitEthernet0/3 : address is 0023.5e15.fe4d, irq 9
4: Ext: Management0/0 : address is 0023.5e15.fe49, irq 11
5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11
6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 150
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : 750
WebVPN Peers : 2
AnyConnect for Mobile : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
UC Proxy Sessions : 2
This platform has an ASA 5520 VPN Plus license.
Configuration register is 0x1
Я и не говорил, что это связяно с лицензированием - я подозреваю, что это связано с защитой от DoS атак (ограничение не НЕ НА ВСЕ СОЕДИНЕНИЯ ЧЕРЕЗ ASA, А ТОЛЬКО В ПАРЕ HOST to HOST)