Focus

Disable Tunnel Acceleration

Table of Contents

Filter

Expand All | Collapse All

Next-Generation Firewall Docs

Getting Started
Administration
Version
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 9.1
Networking
Version
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
AIOps
Incidents & Alerts
Release Notes
Version
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1

Tunnel Acceleration Behavior

Network Packet Broker

Disable Tunnel Acceleration

Disable tunnel acceleration for GRE, VXLAN, and GTP-U tunnels to troubleshoot.

By default, supported firewalls perform tunnel acceleration to improve performance and throughput for traffic going through GRE tunnels, VXLAN tunnels, and GTP-U tunnels. Tunnel acceleration provides hardware offloading to reduce the time it takes to perform flow lookups and allows the tunnel traffic to be distributed more efficiently based on the inner traffic.

GRE and VXLAN tunnel acceleration is supported on PA-3200 Series firewalls, PA-5450 firewalls, and PA-7000 Series firewalls with PA-7000-100G-NPC-A and PA-7050-SMC-B or PA-7080-SMC-B. You can disable tunnel acceleration to troubleshoot. When you disable tunnel acceleration, you are doing so for GRE, VXLAN, and GTP-U tunnels simultaneously.

There is no performance impact for GRE traffic when disabling tunnel acceleration if no tunnel content inspection (TCI) policies are being used.

Select

Device

Setup

Management

and edit General Settings.

Deselect

Tunnel Acceleration

to disable it.

Click

Commit

Reboot the firewall.

(Optional) Verify status of tunnel acceleration.

Access the CLI.

show tunnel-acceleration

System output is

Enabled

Disabled

. Additional status and reason for GTP-U only:

Disabled

—GTP-U tunnel acceleration is not supported on firewall model or GTP Security is disabled.

Error (TCI with GTP-U configured unexpectedly)

—TCI with GTP-U protocol is configured when Tunnel Acceleration is enabled.

Enabled

—Tunnel Acceleration is enabled; GTP-U Tunnel Acceleration is not running yet. GTP Security is enabled, but yet to reboot.

Installed

—GTP-U Tunnel Acceleration is running.

Tunnel Acceleration Behavior

Network Packet Broker

Next-Generation Firewall Docs

Disable Tunnel Acceleration

Next-Generation Firewall Docs

Disable Tunnel Acceleration

Recommended For You

Activation and Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Network Security

Visibility & Monitoring

Best Practices

Experts Corner