|
Feature |
Product |
Release introduced |
|---|---|---|
|
IPsec compression |
5320 Series |
Not Supported |
|
5420 Series |
Not Supported |
|
|
5520 Series |
Not Supported |
|
|
5720 Series |
Fabric Engine 8.7 5720-24MXW and 5720-48MXW using Fabric IPsec Gateway |
|
|
7520 Series |
Fabric Engine 8.10 using Fabric IPsec Gateway |
|
|
7720 Series |
Fabric Engine 8.10 using Fabric IPsec Gateway |
|
|
VSP 4450 Series |
Not Supported |
|
|
VSP 4900 Series |
VOSS 8.7 VSP4900-12MXU-12XE and VSP4900-24XE using Fabric IPsec Gateway |
|
|
VSP 7200 Series |
Not Supported |
|
|
VSP 7400 Series |
VOSS 8.7 using Fabric IPsec Gateway |
|
|
VSP 8200 Series |
Not Supported |
|
|
VSP 8400 Series |
Not Supported |
|
|
VSP 8600 Series |
Not Supported |
|
|
XA1400 Series |
VOSS 8.1.8 |
IPsec compression reduces the size of the IP datagram to improve the communication performance between hosts connected behind Backbone Edge Bridges (BEB).
Note
This feature is supported on 5720-24MXW, 5720-48MXW, 7520 Series, and 7720 Series using Fabric IPsec Gateway.
Tip
As a best practice, use IPsec compression only for Fabric Extend tunnels where latency is greater than 70ms.
The following list identifies how you can implement IPsec compression:
You can configure multiple IPsec Fabric Extend (FE) adjacencies with or without compression simultaneously.
You must enable IPsec compression on both BEBs to use IPsec compression for an FE adjacency.
You cannot configure IPsec compression if fragmentation before encryption is already enabled.
You can change the IPsec compression configuration only if IPsec is disabled.
To configure IPsec compression, see Configure IPsec Compression.