 | Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |
You can enable egress filtering (which allows egress Layer 3 VPN PE routers to perform lookups on the VPN label and IP header at the same time) by including the vrf-table-label statement at the [edit routing-instances instance-name] hierarchy level. However, there are many limitations on when you can configure the vrf-table-label statement. For more information, see Support for ATM and Frame Relay Interfaces and Other Limitations. There is no restriction on CE-router-to-PE-router interfaces.
You can also enable egress filtering by configuring a VPN tunnel (VT) interface on routing platforms equipped with a Tunnel Services Physical Interface Card (PIC). When you enable egress filtering this way, there is no restriction on the type of core-facing interface used. There is also no restriction on the type of CE-router-to-PE-router interface used.
| Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |