Tunnel termination can be configured for received L2 or L3 packets.
You can configure settings to apply tunnel termination to received packets, either tunneled (both L2 and L3) or non-tunneled. Tunnel termination is performed at either ingress or egress before packets are forwarded to analysis tools, depending on the policy configuration. The outer tunnel of L2 tunneled packets is removed and the current position is shifted to the start of the inner L2 header, as shown in the following figure.
Because L3 tunneled-packet inner headers do not have the L2 header, the following occurs (shown in figure):
For more information about decapsulating packets, see Tunnel Termination.