Use the auxiliary SPI when you configure the protocol statement to use the bundle option.
![]() |
Note: Each manual SA must have a unique SPI and protocol combination. |
To configure the auxiliary SPI, include the auxiliary-spi statement and specify a value (from 256 through 16,639) at the [edit services ipsec-vpn rule rule-name term term-name then manual direction direction] hierarchy level:
-
auxiliary-spi auxiliary-spi-value;