VMware Networking Community

Limitation on NSX Edge IKEv2 SAs

Is there a limitation on the number of SAs that can be established if you're using IKEv2 for a vpn between an Edge and 3rd party firewall?  I'm seeing interesting behavior and wanted to confirm.  I have a tunnel established that has 10 /32s on the local side and 4 /24s on the remote side so seeing 40 SAs being built but consistently having issues passing traffic over all of them.  If both sides bounce the tunnel things seemingly work again for a while but then run into the issue at some point.  

0 Kudos
0 Replies