Juniper JUNOSE 10.0.X PHYSICAL LAYER, Configuration Manual

Page: 239 / 262

use these dynamic interfaces, see L2TP Overview in JUNOSe Broadband Access
Configuration Guide .
■
Secure IP tunnels
IPSec-service modules are associated with secure IP tunnels. You must configure
and delete these interfaces statically; however, the router assigns tunnels to the
interfaces dynamically. This mechanism means that you must manage the
interfaces for tunnels manually: however, the router adds and removes tunnels
when required. For information about configuring secure IP tunnels, see
Configuring IPSec in JUNOSe IP Services Configuration Guide .
Tunnel-Service Interface Platform Considerations
You can configure tunnel-service interfaces on the following E-series routers:
■
E120 router
■
E320 router
■
ERX-1440 router
■
ERX-1410 router
■
ERX-710 router
■
ERX-705 router
■
ERX-310 router
This section describes the line modules, I/O modules, and I/O adapters (IOAs) that
support tunnel-service interfaces.
For detailed information about the modules that support tunnel-service interfaces
on the ERX-14xx models, ERX-7xx models, and the ERX-310 router:
■
See ERX Module Guide, Table 1, Module Combinations for detailed specifications
of these modules.
■
See ERX Module Guide, Appendix A, Module Protocol Support for information about
the protocols and applications that tunnel-service modules support.
For detailed information about the modules that support tunnel-service interfaces
on the E120 router and the E320 router:
■
See E120 and E320 Module Guide, Table 1, Modules and IOAs for detailed
specifications of these modules.
■
See E120 and E320 Module Guide, Appendix A, IOA Protocol Support for information
about the protocols and applications that tunnel-service modules support.
Supported Modules for Dedicated Tunnel-Server Ports
All E-series routers support dedicated tunnel-server ports; however, the supported
modules depend on the type of E-series router that you have.
Tunnel-Service Interface Platform Considerations
■ 213
Chapter 6: Managing Tunnel-Service and
IPSec-Service Interfaces