Restrictions

The following restrictions apply to flow-tap services:

• You cannot configure dynamic flow capture (DFC) and flow-tap features on the same router simultaneously.
• When the DFC process or the AS or MultiServices PIC configured for flow-tap processing restarts, all filters are deleted and the mediation devices are disconnected.
• Only the first fragment of an IPv4 fragmented packet stream is sent to the content destination.
• Port mirroring might not work in conjunction with flow-tap processing.
• If flow-tap is configured, you cannot configure the filter action then syslog for any firewall filter running on the same platform.
• Running the flow-tap application over an IPSec tunnel on the same router can cause packet loops and is not supported.