IPSec-Enabled PICs

The first choice you need to make when implementing IPSec on a JUNOS software-based routing platform is the type of Physical Interface Card (PIC) you wish to use. There are three types of PICs available for M-series and T-series platforms:

• The ES PIC is a first-generation PIC that provides encryption services and software support for IPSec.
• The Adaptive Services (AS) PIC is a next-generation PIC that provides IPSec services and other services, such as Network Address Translation (NAT) and stateful firewall.
• The AS II Federal Information Processing Standards (FIPS) PIC is a special version of the AS PIC that communicates securely with the Routing Engine by using internal IPSec. You must configure IPSec on the AS II FIPS PIC when you enable FIPS mode on the routing platform. For more information about implementing IPSec on an AS II FIPS PIC installed in a routing platform configured in FIPS mode, see the Secure Configuration Guide for Common Criteria and JUNOS-FIPS.
• The MultiServices PICs supply hardware acceleration for an array of packet processing-intensive services in the M-series and T-series routers. These services include IPSec services and other services, such as stateful firewall, NAT, IPSec, anomaly detection, and tunnel services.

The J-series Services Routers also perform IPSec services in a manner similar to the AS and MultiServices PICs. However, the J-series Services Routers do this using the JUNOS software without a corresponding PIC. For more information about implementing IPSec on a J-series Services Router, see the J-series Services Router Advanced WAN Access Configuration Guide.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.