IPSec-Enabled PICs
The first choice you need to make when implementing IPSec on a Junos OS-based router is the type of Physical Interface Card (PIC) you wish to use. There are three types of PICs available for M Series and T Series platforms:
- The ES PIC is a first-generation PIC that provides encryption services and software support for IPSec.
- The Adaptive Services (AS) PIC is a next-generation PIC that provides IPSec services and other services, such as Network Address Translation (NAT) and stateful firewall.
- The AS II Federal Information Processing Standards (FIPS) PIC is a special version of the AS PIC that communicates securely with the Routing Engine by using internal IPSec. You must configure IPSec on the AS II FIPS PIC when you enable FIPS mode on the router. For more information about implementing IPSec on an AS II FIPS PIC installed in a router configured in FIPS mode, see the Secure Configuration Guide for Common Criteria and Junos-FIPS.
- The MultiServices PICs supply hardware acceleration for an array of packet processing-intensive services in the M Series and T Series routers. These services include IPSec services and other services, such as stateful firewall, NAT, IPSec, anomaly detection, and tunnel services.
