The IPSec Large feature boosts IPSec crypto performance by enabling the resource manager (RM) task to assign additional IPSec managers to packet processing cards that have sufficient processing capacity. The system can be configured to achieve a higher per SF scale by configuring the [no] require ipsec-large command. This configuration is effective during init time only, and system resources are adjusted accordingly for more number of ePDG sessions or IPSec tunnel establishments.

Important

When IPSec large and demux on MIO are configured together, enable the IPSec large feature (using the require ipsec-large command) before enabling the demux on MIO (using the require demux management-card command).