|
Feature |
Product |
Release introduced |
|---|---|---|
|
IPsec compression |
5320 Series |
Not Supported |
|
5420 Series |
Not Supported |
|
|
5520 Series |
Not Supported |
|
|
5720 Series |
Fabric Engine 8.7 5720-24MXW and 5720-48MXW using Fabric IPsec Gateway |
|
|
7520 Series |
Fabric Engine 8.10 using Fabric IPsec Gateway |
|
|
7720 Series |
Fabric Engine 8.10 using Fabric IPsec Gateway |
|
|
VSP 4450 Series |
Not Supported |
|
|
VSP 4900 Series |
VOSS 8.7 VSP4900-12MXU-12XE and VSP4900-24XE using Fabric IPsec Gateway |
|
|
VSP 7200 Series |
Not Supported |
|
|
VSP 7400 Series |
VOSS 8.7 using Fabric IPsec Gateway |
|
|
VSP 8200 Series |
Not Supported |
|
|
VSP 8400 Series |
Not Supported |
|
|
VSP 8600 Series |
Not Supported |
|
|
XA1400 Series |
VOSS 8.1.8 |
IPsec compression reduces the size of the IP datagram to improve the communication performance between hosts connected behind Backbone Edge Bridges (BEB).
Note
This feature is supported on XA1400 Series, VSP 4900 Series, and VSP 7400 Series. VSP 4900 Series and VSP 7400 Series switches provide that support using Fabric IPsec Gateway.
Tip
As a best practice, use IPsec compression only for Fabric Extend tunnels where latency is greater than 70ms.
The following list identifies how you can implement IPsec compression:
You can configure IPsec compression for each logical-interface.
You can configure multiple IPsec Fabric Extend (FE) adjacencies with or without compression simultaneously.
You must enable IPsec compression on both BEBs to use IPsec compression for an FE adjacency.
You cannot configure IPsec compression if fragmentation before encryption is already enabled.
You can change the IPsec compression configuration only if IPsec is disabled.
For configuration information, see the following tasks:
Configure Fabric Extend Over IPsec (using CLI)
Configure Fabric Extend Logical Interfaces for Native Support (using EDM)