JUNOSe 9.1.x Physical Layer Configuration Guide > Managing Tunnel-Service and
IPSec-Service Interfaces > Configuring Tunnel-Server Ports and Tunnel-Service Interfaces

Configuring Tunnel-Server Ports and Tunnel-Service Interfaces

This section describes the tasks associated with configuring a tunnel-server port and tunnel-service interface.

Identifying the Physical Location of the Tunnel-Server Port

To display the physical location of the dedicated tunnel-server port on your module, issue the show tunnel-server config command.

host1#show tunnel-server config

                          Server Ports

                          ------------

                                         Provisioned

  Port      Type     MaximumInterfaces   Interfaces    HwPresent

--------   -------   -----------------   -----------   ---------

Port 2/2   shared       8000                0             yes

Port 8/0   dedicated    16000               8000          yes

Provisioning the Maximum Number of Interfaces on a Tunnel-Server Port

To provision the maximum number of interfaces on a tunnel-server port:

1. From Global Configuration mode, specify the location of the dedicated tunnel-server port that you want to configure.

On a dedicated tunnel-server port:

host1(config)#tunnel-server 8/0

host1(config-tunnel-server)#

On a shared tunnel-server port:

host1(config)#tunnel-server 2/2

host1(config-tunnel-server)#

This command accesses Tunnel Server Configuration mode.

2. Provision the maximum number of tunnel-service interfaces to be used on the dedicated tunnel-server port.

host1(config-tunnel-server)#max-interfaces all-available

 NOTE: When you issue the tunnel-server command, ensure that you specify the same interface specifier that was displayed for this tunnel-server port in the show tunnel-server config command in the output described in Identifying the Physical Location of the Tunnel-Server Port. If you specify an incorrect location for the tunnel-server port, the router displays an error message and rejects the command as invalid.



 

Verifying the Tunnel-Server Interface Configuration

To verify that you properly provisioned the number of tunnel-server interfaces on the tunnel-server port:

1. From Tunnel Server Configuration Mode, return to Privileged Exec mode.

host1(config-tunnel-server)#exit

host1(config)#exit

host1#

2. Issue the show tunnel-server config command.

host1#show tunnel-server config

                          Server Ports

                          ------------

                                         Provisioned

  Port      Type     MaximumInterfaces   Interfaces    HwPresent

--------   -------   -----------------   -----------   ---------

Port 2/2   shared       8000                5000          yes

Port 8/0   dedicated    16000               all-available yes

For more information about using the show tunnel-server command, see Monitoring Tunnel-Service Interfaces.

Unprovisioning Tunnel-Service Interfaces

To unprovision the tunnel-service interfaces on a tunnel-server port, use any of the following commands, all of which have the same effect:

• Issue the no max-interfaces command from Tunnel Server Configuration mode.

host1(config-tunnel-server)#no max-interfaces

• Issue the max-interfaces 0 command from Tunnel Server Configuration mode.

host1(config-tunnel-server)#max-interfaces 0

• Issue the no tunnel-server command from Global Configuration mode. This command unprovisions the tunnel-service interfaces on the specified tunnel-server port but does not delete the port itself.

host1(config)#no tunnel-server 2/2

max-interfaces

• Use from Tunnel Server Configuration mode to provision the maximum number of tunnel-service interfaces to be used on a tunnel-server port.
• Specify an integer in the range 0–16000 to provision the maximum number of tunnel-service interfaces.
• Use the all-available keyword to provision the maximum number of tunnel-service interfaces to match the maximum value that the tunnel-server module supports.
• Examples

host1(config-tunnel-server)#max-interfaces 5000

host1(config-tunnel-server)#max-interfaces all-available

• Use the default version to restore the default configuration. On dedicated tunnel-server ports, the default configuration is the maximum number of tunnel-service interfaces that the tunnel-service module supports (all-available). On shared tunnel-server ports, the default configuration is zero tunnel-server interfaces.
• Use the no version to reduce the number of provisioned tunnel-service interfaces to zero. Issuing the no max-interfaces command has the same effect as issuing the max-interfaces 0 command.

tunnel-server

• Use from Global Configuration mode to specify the physical location of the tunnel-server port that you want to configure.
• The tunnel-server command accesses Tunnel Server Configuration mode, which enables you to provision the maximum number of tunnel-service interfaces to be used on the tunnel-server port.
• For ERX-7xx models, ERX-14xx models, and the ERX-310 router, use the slot/port format.
• For the E120 router and the E320 router, use the slot/adapter/port format. On dedicated tunnel-server ports, use adapter 0 and port 0. On shared tunnel-server ports, use adapter 2 and port 0.
• Example

host1(config)#tunnel-server 12/2

• Use the default version to restore the default configuration. On dedicated tunnel-server ports, the default configuration is the maximum number of tunnel-service interfaces that the tunnel-service module supports. On shared tunnel-server ports, the default configuration is zero tunnel-service interfaces.
• Use the no version to reduce the number of provisioned tunnel-service interfaces to zero.