Cisco Cisco IOS Software Release 12.2(14)S

The Cisco IOS Release 12.2(14)SU2 shares the same set of limitations as 12.2(14)SU, including the 
following:

No EzVPN support for Stateful Failover

Only single VAM/VAM2 support in the high availability (HA) configuration

IPSec stateful solution is incompatible with old style IKE keepalives but is compatible with DPD 
(Note: DPD is not a requirement for IPSec stateful HA solution)

No AES support in Cisco IOS Release 12.2(14)SU2

No NAT-T features

This section includes the following topics:

Number of tunnels

2000 tunnels [2000 IKE SA: 4000 IPSec SA] for Cisco 7200 with 
NPE-G1 or NPE400 with VAM/VAM2

500 tunnels for Cisco 7200 with NPE225 with VAM/VAM2

GRE

1000 GRE/IPSec tunnels