Whether the USG2000 requires a license for IPSec VPN

10

The USG2000 does not require a license for the IPSec feature.

Other related questions:
Whether the USG5000 requires a license for IPSec VPN
IPSec license for USG firewalls: 1. If the license is not activated, IPSec cannot be used on the USG5300. The web UI and CLI are invisible. After a formal license is purchased and activated, up to 15000 tunnels are supported. 2. The USG5000 does not require a license for the IPSec feature.

IPSec support by AR series routers
Huawei AR series routers support IPSec. Among which, the AR502EG-L, AR502EGW-L, and AR550C-2C6GE do not support Efficient VPN. To support the IPSec protocol standard regulated by the State Cryptography Administration, the AR must have a Network Data Encryption (NDE) card or high-performance Network Data Encryption card installed in a SIC slot. Efficient VPN does not support the IPSec protocol standard regulated by the State Cryptography Administration. The AR510 does not support the IPSec tunnel that is established using an ACL or a virtual tunnel interface. It supports only the IPSec tunnel that is established using Efficient VPN and can only be used as a remote device. Efficient VPN function requires a license. To use the Efficient VPN function, apply for and purchase the following license from the Huawei local office: - AR150&AR160&AR200&AR150-S&AR160-S&AR200-S: AR150&160&200 value-added service package for security services -AR1200&AR1200-S: AR1200 value-added service package for security services -AR2200&AR2200-S: AR2200 value-added service package for security services -AR3200&AR3200-S: AR3200 value-added service package for security services -AR3600: AR3600 value-added service package for security services -AR531-2C-H and AR531-F2C-H: AR530 value-added router package -AR550: AR550 value-added service package for routing services Note: The IPSec function can be used without a license on the AR120, AR503, AR509, and AR510 series, AR531GPe-U-H, AR531GR-U-H, AR531G-U-D-H, AR100-S, AR110-S, AR120-S series, and AR2500 series. In V200R007C00, the AR150-S, AR160-S, AR200-S, and AR1200-S do not require a license. In V200R008 and later versions, the AR150-S series, AR160-S series, AR200-S series, and AR1200-S series do not require a license. For details on how to apply for a license, see License Request guide.

Whether the SSL VPN function of the USG2000 and USG5000 series requires a license
In the USG2000 and USG5000 series, the SSL VPN function is not subject to a license. However, the number of SSL VPN concurrent users is controlled by a license. The number of SSL VPN concurrent users permitted by the license varies depending on device models: USG2130/USG2130W/USG2110-X and USG2130HSR/USG2130HSR-W: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 20. USG2160/USG2160W and USG2160HSR/USG2160HSR-W: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 50. USG2200 and USG2200HSR: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 100. USG5120, USG5110HSR, and USG5120HSR: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 150. USG5150/USG5160, and USG5150HSR: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 200. USG5500: By default, 10 users are supported. Customers can purchase the license to expand the number of supported users to 500.

Whether the firewall supports the IPSec VPN license
Support of the IPSec VPN license on the USG IPSec license control on the USG: 1. If the license is not activated on the USG5300, the IPSec function, web UI, and CLI are unavailable. After a commercial license is purchased and activated, a maximum of 15,000 tunnels are supported. 2. There is no description about IPSec license control on the USG2000&5000. Therefore, no license is required. 3. There is no description about IPSec license control on the USG6000. Therefore, no license is required by default.

Whether the USG9000 and USG2000 support establishing IPSec VPN
The IPSec VPN tunnel can be established as long as the IP addresses of the two ends are reachable.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top