Hyperscale firewall VDOM asymmetric routing with ECMP support
In most cases asymmetric routing with ECMP support works the same way in a hyperscale firewall VDOM as in a normal VDOM, with the following notes and exceptions:
-
The
auxiliary-session
andasymroute-icmp
options of theconfig system settings
command do not have to be enabled for the hyperscale firewall VDOM for asymmetric routing to work. -
Make sure that original routes (O-routes) do not overlap with reverse routes (R-routes). If you have created overlapping O- and R-routes, all reply traffic uses the same O-route.
-
If possible, create an even number of ECMP paths. Traffic distribution is uneven if you have an odd number of ECMP paths. For example, if your configuration includes one O-route and three R-routes, the reply traffic distribution will be approximately 2:1:1 among the three R-routes.