SPI Distribution on SSM160 (asg dxl spi)
By default, the SSM160 distributes traffic to SGMs based on the IP address in the packet header. This methodology can be inefficient when working with a small number of remote peers in a Site-To-Site VPN topology. This is because the SSM160 only sees the VPN tunnel IP address and causes distribution only to some SGMs.
To resolve this issue, you can enable SPI distribution for VPN traffic.
|
Important - You must not enable SPI distribution and Sticky SA at the same time.
|
> set distribution spi mode on|off
Note: SPI distribution mode is disabled by default.
|
