Unsupported Features

Some features are not supported for unicast IP communications over IPsec.

Unsupported Features for Unicast Communications over IPsec

Feature Description
Tunnel setup

Because of a hardware limitation and the fact that IPsec tunnels can only carry IP inner packets, IPv4 tunnels cannot be set up if the remote endpoint can only be reached by:

  • GRE tunnel
  • IGP shortcut
  • Manual IPv6 tunnels
  • 6to4 tunnel
  • IPsec tunnel
  • ERSPAN management interface (when the destination is reachable over a tunnel)
ESP in transport mode ESP in transport mode is not currently supported.
Parent topic: IPsec Overview