Source port filtering is enabled by default to prevent traffic from egressing out the same interface it ingressed on.

Current VXLAN decapsulation logic requires the following hits on affected switches listed in the following