Junos OS optimized tunnel redistribution. After tunnel redistribution, the data path might not be optimal. You can use VPN session affinity to optimize the data path after tunnel redistribution. Note that the data path that is being optimized experiences a higher packet delay until it is fully optimized.
Devices don't support VPN session affinity by default. To enable this feature, use the set security flow load-distribution session-affinity ipsec command.
