IPsec compression reduces the size of the IP datagram to improve the communication performance between hosts connected behind Backbone Edge Bridges (BEB).
Note
This feature is supported on XA1400 Series, VSP 4900 Series, and VSP 7400 Series. VSP 4900 Series and VSP 7400 Series switches provide that support using Fabric IPsec Gateway.
Tip
As a best practice, use IPsec compression only for Fabric Extend tunnels where latency is greater than 70ms.
The following list identifies how you can implement IPsec compression:
You can configure IPsec compression for each logical-interface.
You can configure multiple IPsec Fabric Extend (FE) adjacencies with or without compression simultaneously.
You must enable IPsec compression on both BEBs to use IPsec compression for an FE adjacency.
You cannot configure IPsec compression if fragmentation before encryption is already enabled.
You can change the IPsec compression configuration only if IPsec is disabled.
For configuration information, see the following tasks:
Configure Fabric Extend Over IPsec (using CLI)
Configure Fabric Extend Logical Interfaces for Native Support (using EDM)