You can configure the egress shaping rate to limit egress bandwidth for tunnels on the Fabric IPsec Gateway Virtual Machine (VM).
Consider the following when you configure the egress shaper rate:
If the ingress data traffic receives excessive packets with the following DSCP or 802.1p values (high priority control packets) and egress shaping is configured, a IS-IS flap can be seen.
| DHCP value | 802.1p value |
|---|---|
|
0x28 |
6 |
|
0x2E |
6 |
|
0x2F |
6 |
|
0x30 |
7 |
|
0x38 |
7 |
The egress tunnel shaping rate is impacted if the incoming packet size is greater than the Fabric Extend tunnel MTU. This is due to the additional packet header required for fragmentation.