Similarly, service providers can use subscriber interfaces to differentiate traffic for VPNs. Figure 18 shows an example of this application.
Customers on subnet A need to connect to VPN A, and customers on subnet B need to connect to VPN B. The E-series router connects to VPN A through virtual router A and to VPN B though virtual router B. Using two subscriber interfaces on the same primary interface (one on virtual router B and one on virtual router A), the E-series router can separate the traffic from subnets A and B. Because the E-series router is forwarding traffic in this application, the shared IP interface should demultiplex the traffic by using a source address.
Figure 18: Associating Subnets with a VPN Using Subscriber Interfaces
For instructions on configuring the application shown in Figure 18, see Using a Source Address to Demultiplex Traffic.
 | Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |