.. _example_system_offload_xfrmoffload:

############
Xfrm Offload
############


.. sidebar:: Contents

  .. contents::
    :depth: 1
    :local:

This scenario shows how to configure IPSec policies and offload
encryption/decryption processes.

.. image:: xfrm.svg
  :width: 400

**************************
Test XFRM Offload With VTI
**************************

Description
===========

In this scenario, the tunnel is established by using a
site-to-site peer through VTI interfaces.

Scenario
========

.. include:: xfrmoffload/testxfrmoffloadwithvti

.. raw:: html

  <hr>

****************************************
Test XFRM Offload With DMVPN Tunnel Mode
****************************************

Description
===========

In this scenario, the tunnel is established by using NHRP.
Tunnel mode is used for IPSec policies.

Scenario
========

.. include:: xfrmoffload/testxfrmoffloadwithdmvpntunnelmode

.. raw:: html

  <hr>

*******************************************
Test XFRM Offload With DMVPN Transport Mode
*******************************************

Description
===========

In this scenario, the tunnel is established by using NHRP.
Transport mode is used for IPSec policies.

Scenario
========

.. include:: xfrmoffload/testxfrmoffloadwithdmvpntransportmode

.. raw:: html

  <hr>

***********************************
Test XFRM Offload With Site To Site
***********************************

Description
===========

In this scenario, the tunnel is established by using a
site-to-site peer.

Scenario
========

.. include:: xfrmoffload/testxfrmoffloadwithsitetosite

.. raw:: html

  <hr>

**********************************************
Test XFRM Offload With Bridge and Site To Site
**********************************************

Description
===========

In this scenario, the tunnel is established by using a
site-to-site peer, and the LAN interface is included in a bridge.

Scenario
========

.. include:: xfrmoffload/testxfrmoffloadwithbridgeandsitetosite

.. raw:: html

  <hr>

***************************************************
Test XFRM Offload With Bridge VLAN and Site To Site
***************************************************

Description
===========

In this scenario, the tunnel is established by using a
site-to-site peer, and the LAN interface is included
in a bridge with a VLAN.

Scenario
========

.. include:: xfrmoffload/testxfrmoffloadwithbridgevlanandsitetosite

.. raw:: html

  <hr>