Limitations

There are some limitations that impact the use of IPsec for creating secure tunnels.

The following limitations apply:

  • Only one active ICX7400-SERVICE-MOD module is supported in a RUCKUS ICX 7450 stack.
  • Fragmentation is not supported when traffic is routed over an IPSec tunnel; a fragmented IPsec packet received on an IPv4 IPsec tunnel is dropped because IPsec packets are not re-assembled before decryption.
  • GRE and IPsec encapsulation are not performed together for the same flow in the same device.
  • When multiple IPSec tunnels are configured on the same device, each IPsec tunnel must have a unique tunnel source, destination, and VRF combination.
  • IPsec tunnels are not supported when unicast Reverse Path Forwarding (uRPF) is enabled globally.
  • Multicast is not supported over IPsec tunnels.
Parent topic: IPsec Overview