alt text here
alt text here

Extreme Tunnel Concentrator

High-Performance VPN Tunnel Termination

Product Highlights


Traffic aggregation for distributed cloud-managed access points

Management and analytics with ExtremeCloud IQ

  • Simplified network operations
  • Link state visibility monitoring
  • Advanced reporting and network insights

Data segmentation

  • Separated guest and corporate traffic
  • Isolated management and data paths

The Extreme Tunnel Concentrator is designed to simplify tunnel termination and is a key component of Extreme’s branch solution. The application is part of the ExtremeCloud portfolio of applications and is deployed on the ExtremeCloud Edge platform. Extreme Tunnel Concentrator provides scalable, enterprise-class GRE/IPSec* tunnel termination for thousands of Layer 2 GRE/IPSec tunnels from remote access locations.

Underpinned by ExtremeCloud IQ management and software-defined device intelligence, the Extreme Tunnel Concentrator provides highly distributed organizations with simplified provisioning, increased network resilience, end-to-end visibility and control, and reduced cost and complexity.

* Any use of IPSec functionality refers to the use of Extreme Tunnel Concentrator with ExtremeCloud IQ Controller.


  • Up to 3 Tunnel Concentrator instances
  • Max. number of tunnels per instance – 5,000 per instance and 15,000 per 4120C
  • Professional Services recommended
  • High availability with active standby redundancy
  • Flexible deployment of ExtremeCloud IQ cloud management for public, private, and ExtremeCloud Edge
  • ExtremeCloud IQ Controller for on-premises Wi-Fi requirements
  • Full-stack solution when combined with Extreme's unified switches, routers, and wireless APs
  • Simplified rollout – near zero-touch deployment, automatically apply configuration policies
  • Tunnel monitoring through ExtremeCloud IQ
  • QoS policy propagation
  • Max. throughput per Extreme Tunnel Concentrator instance – 10 Gbps, 30 Gbps per appliance
Note: Throughput per Extreme Tunnel Concentrator instance may be affected by enabling IPSec encryption.