When determining how to distribute interfaces across tunnel-server ports, the E-series router does not perform interface policing to prevent the access services of a shared tunnel-server module from depriving the tunnel services of the requisite interface resources (and vice-versa). We recommend that when provisioning shared tunnel-server ports, you restrict the number of interfaces configured for both access and tunnel services to prevent competition between them.
For example, when paired with the ES2-S1 OC3-8/STM1 IOA or the ES2-S1 GE-4 IOA, the ES2 4G LM on the E320 router can support a maximum of 16,000 access interfaces and 8,000 shared tunnel-server interfaces, both of which must compete for the overall supported maximum of 16,000 interface columns.
For tunneling, PPP, and IP maximums, see JUNOSe Release Notes, Appendix A, System Maximums.