In options for firewall on controllers there is an option:
session-tunnel-fib
as the description for this option in CLI Reference isn't much helpfull:
"Enable session tunnel-based forwarding.
NOTE: Best practices is to enable this parameter only during maintenance window or off-peak production hours. On the M3, this parameter only enables tunnel-based forwarding, as session-based forwarding does not apply to this platform."
and there is no mentions in User Guide I would like to ask what is the purpose of this session-tunnel-fib option?
Does it relate to tunnels established with APs in tunneled based mode or it does soemething with GRE tunnels or maybe it has influence for tunnels between controllers and MM?