Juniper JUNOSE 10.0.X PHYSICAL LAYER, Configuration Manual

Page: 237 / 262

Chapter 6
Managing Tunnel-Service and
IPSec-Service Interfaces
This chapter describes how to configure tunnel-server ports, tunnel-service interfaces,
and IPSec-service interfaces on E-series routers.
This chapter contains the following sections:
■
Tunnel-Service and IPSec-Service Overview on page 211
■
Tunnel-Service Interface Platform Considerations on page 213
■
Redundancy and Interface Distribution of Tunnel-Service Interfaces on page 217
■
Tunnel-Service Interface Considerations on page 219
■
Configuring Tunnel-Server Ports and Tunnel-Service Interfaces on page 221
■
Monitoring Tunnel-Service Interfaces on page 224
Tunnel-Service and IPSec-Service Overview
Tunnels provide a way of transporting datagrams between routers that do not support
the same protocols. Often, these routers are separated by networks.
To configure tunneling, you must identify the tunnel-server ports that reside on
modules that support tunnel services. You can then assign the tunnel-service interfaces
that encapsulate protocols and enable them to be tunneled across the network.
Figure 13 on page 211 displays the interface stacking for tunnel-service interfaces on
a tunnel-server module.
Figure 13: Interface Stacking for Tunnel-Service Interfaces
Tunnel-Service and IPSec-Service Overview
■ 211