system iptables-enable—Enable the collection of iptable packet-filtering chains for all DTLS peers (on vSmart controllers and vManage NMSs only).
In Release 15.4, it is recommended that you do not enable iptables.
Enable the use of iptables:
vSmart(config)# system iptables-enable
Command introduced in Viptela Software Release 15.4.3.
Starting in Release 16.1, iptables-enable is enabled by default.
See the Policy Basics articles for your software release.