Turns off path selection rules for traffic at the transit site.

None

Transit traffic is defined as traffic that is not sourced or destined locally. In a topology where some of the sites do not have SteelHeads, behavior can occur where path selection rules are applied asymmetrically, which can lead to asymmetrical GRE-encapsulated traffic. This behavior can cause issues with firewalls such as dropped connections.

This command allows the system to push general path selection rules but selectively turn off path selection for transit site traffic. You need to define subnets as part of the local site configuration. The system identifies transit traffic by checking subnets to see if the traffic is sourced or destined locally.

When this command is enabled and transit traffic is bypassed, no path selection matching of rules is applied to transit traffic, which results in traffic being relayed with no failover. Path selection rules are applied to local site traffic even if this command is enabled.

If transit traffic is not bypassed, the SteelHead sees inner channel traffic. DPI does not work on inner channel traffic so application-based path selection will not work on the transit site for optimized connections. Consider this behavior when configuring path selection rules for transit traffic.

This command is disabled by default. Path selection rules are applied to transit site traffic unless you enable this command. Use the no command option to disable this command if it has been enabled.

SteelHead CX, SteelHead EX, SteelHead-c

show path-selection-transit-bypass status