Tunnel-Service Interface Platform Considerations

You can configure tunnel-service interfaces on the following E-series routers:

• E120 router
• E320 router
• ERX-1440 router
• ERX-1410 router
• ERX-710 router
• ERX-705 router
• ERX-310 router

This section describes the line modules, I/O modules, and I/O adapters (IOAs) that support tunnel-service interfaces.

For detailed information about the modules that support tunnel-service interfaces on the ERX-14xx models, ERX-7xx models, and the ERX-310 router:

• See ERX Module Guide, Table 1, Module Combinations for detailed specifications of these modules.
• See ERX Module Guide, Appendix A, Module Protocol Support for information about the protocols and applications that tunnel-service modules support.

For detailed information about the modules that support tunnel-service interfaces on the E120 router and the E320 router:

• See E120 and E320 Module Guide, Table 1, Modules and IOAs for detailed specifications of these modules.
• See E120 and E320 Module Guide, Appendix A, IOA Protocol Support for information about the protocols and applications that tunnel-service modules support.

Supported Modules for Dedicated Tunnel-Server Ports

All E-series routers support dedicated tunnel-server ports; however, the supported modules depend on the type of E-series router that you have.

ERX-7xx Models, ERX-14xx Models, and the ERX-310 Router

ERX-7xx models, ERX-14xx models, and the ERX-310 router all support Service Modules (SMs) and IPSec Service Modules (ISMs).

Unlike other line modules, SMs and ISMs do not pair with corresponding I/O modules that provide ingress and egress ports. Instead, they receive data from and transmit data to other line modules with ingress and egress ports.

See JUNOSe Release Notes, Appendix A, System Maximums for information about the number of tunnels and sessions that each module supports.

E120 Router and E320 Router

The E120 router and the E320 router support the ES2-S1 Service IOA and ES2 4G line module (LM) combination.

Unlike SMs and ISMs, you must install the ES2-S1 Service IOA with the ES2 4G LM to use dedicated tunnel-server ports. The ES2-S1 Service IOA does not have ingress and egress ports, but it conditions the ES2 4G LM to receive and transmit data to other line modules.

See JUNOSe Release Notes, Appendix A, System Maximums for information about the number of tunnels and sessions that the ES2-S1 Service IOA supports.

Supported Modules for Shared Tunnel-Server Ports

Most E-series routers support shared tunnel-server ports; however, the supported modules depend on the type of E-series router that you have.

See JUNOSe Release Notes, Appendix A, System Maximums for information about the number of tunnels and sessions that each module supports.

ERX-14xx Models and the ERX-310 Router

The ERX-1440 router and the ERX-310 router support line modules on which you can use shared tunnel-server ports. The following module combinations offer tunnel services in addition to regular access services:

• GE-2 line module with the GE-2 APS I/O module installed
• GE-HDE line module with the GE-2 SFP I/O module installed
• GE-HDE line module with the GE-8 I/O module installed

E120 Router and E320 Router

The E120 router and the E320 router support shared tunnel-server ports on the following line module and IOA combinations:

• ES2 4G LM with the ES2-S1 GE-4 IOA
• ES2 4G LM with the ES2-S1 GE-8 IOA
• ES2 4G LM with the ES2-S1 10GE IOA
• ES2 4G LM with OCx/STMx ATM IOAs
• ES2 4G LM with OCx/STMx POS IOAs

Numbering Scheme

When configuring or managing tunnel-server ports, you must know the numbering scheme for identifying the physical location of the port in the E-series router. The numbering scheme depends on the type of E-series router that you have.

ERX-7xx Models, ERX-14xx Models, and the ERX-310 Router

Use the slot/port format to identify dedicated and shared tunnel-server ports.

• slot—Number of the slot in which the tunnel-server module resides in the chassis

  In ERX-7xx models, line module slots are numbered 2-6; slots 0 and 1 are reserved for SRP modules. In ERX-14xx models, line module slots are numbered 0–5 and 8–13; slots 6 and 7 are reserved for SRP modules. In an ERX-310 router, line module slots are numbered 1–2; slot 0 is reserved for the SRP module.

• port—Number of the port on the tunnel-server module

  For more information about identifying the port number on a tunnel-server port, see Configuring Tunnel-Server Ports and Tunnel-Service Interfaces .

For information about installing tunnel-server modules in ERX routers, see ERX Hardware Guide, Chapter 4, Installing Modules.

E120 Router and E320 Router

Use the slot/adapter/port format to identify dedicated and shared tunnel-server ports.

• slot—Number of the slot in which the line module resides in the chassis

  In the E120 router, line module slots are numbered 0–5. In the E320 router, line module slots are numbered 0–5 and 11–16. For both routers, slots 6 and 7 are reserved for SRP modules; slots 8–10 are reserved for switch fabric modules (SFMs).

• adapter—Number of the bay in which the I/O adapter (IOA) resides

  This identifier applies to the E120 and E320 routers only. Dedicated tunnel-server ports are supported on the ES2-S1 Service IOA, which is a full-height IOA and is identified in the software as adapter 0. Shared tunnel-server ports reside on a virtual adapter that is identified in the software as adapter 2.

• port—Number of the port on the IOA

  For more information about identifying the port number on a tunnel-server port, see Configuring Tunnel-Server Ports and Tunnel-Service Interfaces .

For information about installing tunnel-server modules in the E120 and E320 routers, see E120 and E320 Hardware Guide, Chapter 4, Installing Modules.

Interface Specifier

The configuration task examples in this chapter use the format for ERX-7xx models, ERX-14xx models, and the ERX-310 router to specify a tunnel-server port. (The format is described in Numbering Scheme .)

For example, the following command specifies a dedicated tunnel-server port on port 0 of a tunnel-server module in slot 4.

When you configure a tunnel-server port on an E120 router or an E320 router, you must include the adapter identifier as part of the interface specifier. For example, the following command specifies a dedicated tunnel-server port on port 0 of an ES2-S1 Service IOA installed in both the upper and lower bays of slot 3. (When a full-height IOA is installed in the E120 router or the E320 router, it is identified in the software by the upper adapter bay 0.)

For more information about interface types and specifiers on E-series models, see Interface Types and Specifiers in JUNOSe Command Reference Guide.

Supported Applications for Dedicated and Shared Tunnel-Server Ports

Dedicated and shared tunnel-server ports provide support for some or all of the following applications and services, depending on the capabilities of the tunnel-server module on which the port resides:

• Distance Vector Multicast Routing Protocol (DVMRP) tunnels, also known as IP-in-IP tunnels
• Generic routing encapsulation (GRE) tunnels
• IPSec (on ISMs only)
• Layer 2 Tunneling Protocol (L2TP) network server (LNS) support
• IP packet reassembly for tunnels
• Network Address Translation (NAT)

  Note: Support for IP reassembly and NAT services on shared tunnel-server ports depends on the capabilities of the module on which the shared tunnel-server port resides.

For a list of applications and services that dedicated and shared tunnel-server modules support on ERX-7xx models, ERX-14xx models, and the ERX-310 router, see ERX Module Guide, Appendix A, Module Protocol Support.

For a list of applications and services that dedicated tunnel-server modules support on the E120 and E320 routers, see E120 and E320 Module Guide, Appendix A, IOA Protocol Support.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.