Re: [j-nsp] Juniper SRX assigning IPSec VPN to SPU

2015-11-16 Thread Michael Gehrmann
Were you thinking of the VPN session-affinity feature? This ties into the ipsec performance acceleration. http://www.juniper.net/techpubs/en_US/junos12.3x48/topics/task/configuration/security-vpn-session-affinity-enabling.html http://www.juniper.net/techpubs/en_US/junos12.3x48/topics/task/configu

Re: [j-nsp] Juniper SRX assigning IPSec VPN to SPU

2015-11-13 Thread Damian Holdcroft
Hi I've come across "show security ike tunnel-map", but no command to place tunnels on a specific SPU. Deactivating/reactivating ike gateways can cause a tunnel to be reassigned. Haven't had much luck figuring out a definite pattern to the assignment though.. thought I had it, then it seemed to c

[j-nsp] Juniper SRX assigning IPSec VPN to SPU

2015-11-13 Thread Niklas Hoglund
Hi, anyone seen if its possible to statically assign a IPSec VPN to a particular SPU? ... I've seen that its possible to do resource allocation (as per http://www.juniper.net/documentation/en_US/junos12.1/topics/concept/logical-system-security-cpu-allocation-control-understanding.html) but, still