To configure the ES tunnel interface on the CE router, include the unit statement:
- unit 0 {
-
- tunnel {
- source address;
- destination address;
- }
-
- family inet {
- address address;
- ipsec-sa security-association-name;
- }
- }
You can include the unit statement at the following hierarchy levels:
For more information about how to configure tunnel interfaces, see the JUNOS Services Interfaces Configuration Guide.
For more information about how to configure IPSec interfaces, see the JUNOS System Basics Configuration Guide.