# Configuring Tunnel-Server Ports and Tunnel-Service Interfaces

This section describes the tasks associated with configuring a tunnel-server port and tunnel-service interface.

| Note: Dedicated and shared tunnel servers do not support QoS profiles on interfaces stacked on the server-port.

## Identifying the Physical Location of the Tunnel-Server Port

To display the physical location of the dedicated and shared tunnel-server ports on your module, issue the show tunnel-server config command.

    host1#show tunnel-server config

                           Server Ports
                              ------------
                                             Provisioned
      Port      Type     MaximumInterfaces   Interfaces    HwPresent     Bandwidth-Reserved
    --------   -------   -----------------   -----------   ---------     -----------------
    Port 2/2/0   shared       8000                0             yes		   	N/A
    Port 8/0/0   dedicated    16000               8000          yes		   	N/A
    Port 12/2/0  shared       8000                0             yes		   	90

## Provisioning the Maximum Number of Interfaces on a Tunnel-Server Port

To provision the maximum number of interfaces on a tunnel-server port:

1. From Global Configuration mode, specify the location of the dedicated tunnel-server port that you want to configure.

   On a dedicated tunnel-server port:

   host1(config)#tunnel-server 8/0/0 host1(config-tunnel-server)#

   On a shared tunnel-server port:

   host1(config)#tunnel-server 2/2/0 host1(config-tunnel-server)#

   This command accesses Tunnel Server Configuration mode.

   | Note: When you issue the tunnel-server command, ensure that you specify the same interface specifier that was displayed for this tunnel-server port in the show tunnel-server config command in the output described in Identifying the Physical Location of the Tunnel-Server Port. If you specify an incorrect location for the tunnel-server port, the router displays an error message and rejects the command as invalid.

2. Provision the maximum number of tunnel-service interfaces to be used on the dedicated tunnel-server port.
   host1(config-tunnel-server)#max-interfaces all-available

| Note: When you enable shared tunnel server on the ES2 10G ADV LM, it reloads with a warning message and then the image specific to shared tunnel server appears.

## Reserving Bandwidth on Shared Tunnel-Server Ports

To reserve a certain percentage of the total bandwidth for forwarding on a shared tunnel-server port:

| Note: When you direct the router to reserve a percentage of the total bandwidth for forwarding, you may not always obtain the exact percentage of bandwidth specified. Because of the overhead involved with identifying and assigning incoming traffic to the appropriate resources, you may obtain a value less than the configured value. For instance, if you reserve 50 percent of the total bandwidth for forwarding, you will not obtain an actual bandwidth of 5 Gbps for forwarding and 5 Gbps for tunnel processing.

1. From Global Configuration mode, specify the location of the shared tunnel-server port that you want to configure.
   host1(config)#tunnel-server 2/2/0 host1(config-tunnel-server)#

   This command accesses Tunnel Server Configuration mode.

   | Note: When you issue the tunnel-server command, ensure that you specify the same interface specifier that was displayed for this tunnel-server port in the show tunnel-server config command in the output described in Identifying the Physical Location of the Tunnel-Server Port. If you specify an incorrect location for the tunnel-server port, the router displays an error message and rejects the command as invalid.

2. Reserve the percentage of bandwidth to be used for forwarding on the shared tunnel-server port.
   host1(config-tunnel-server)#reserve-bandwidth 80

| Note: This command is supported only on the ES2 10G ADV LM when configured in shared server mode. It is not supported on other line modules that support tunnel configuration.

## Verifying the Tunnel-Server Interface Configuration

To verify that you properly provisioned the number of tunnel-server interfaces or reserved a percentage of the total bandwidth on the tunnel-server port:

1. From Tunnel Server Configuration Mode, return to Privileged Exec mode.
   host1(config-tunnel-server)#exit host1(config)#exit host1#
2. Issue the show tunnel-server config command.

       host1#show tunnel-server config

                                Server Ports
                                 ------------
                                                Provisioned
         Port      Type     MaximumInterfaces   Interfaces    HwPresent	Bandwidth-Reserved
       --------   -------   -----------------   -----------   ---------	-----------------
       Port 2/2/0   shared       8000                5000          yes				80
       Port 8/0/0   dedicated    16000          all-available 				 yes     N/A
       Port 12/0/0  shared       8000                0					   		   yes      	N/A

   For more information about using the show tunnel-server command, see Monitoring Tunnel-Service Interfaces.

## Unprovisioning Tunnel-Service Interfaces

To unprovision the tunnel-service interfaces on a tunnel-server port, use any of the following commands, all of which have the same effect:

- Issue the no max-interfaces command from Tunnel Server Configuration mode.
  host1(config-tunnel-server)#no max-interfaces
- Issue the max-interfaces 0 command from Tunnel Server Configuration mode.
  host1(config-tunnel-server)#max-interfaces 0
- Issue the no tunnel-server command from Global Configuration mode. This command unprovisions the tunnel-service interfaces on the specified tunnel-server port but does not delete the port itself.
  host1(config)#no tunnel-server 2/2/0

| Note: When you issue these commands on the ES2 10G ADV LM, the line module reloads with a warning message and the original forwarding image appears.

max-interfaces

- Use from Tunnel Server Configuration mode to provision the maximum number of tunnel-service interfaces to be used on a tunnel-server port.
- Specify an integer in the range 0–16000 to provision the maximum number of tunnel-service interfaces.
- Use the all-available keyword to provision the maximum number of tunnel-service interfaces to match the maximum value that the tunnel-server module supports.
- Examples
  host1(config-tunnel-server)#max-interfaces 5000 host1(config-tunnel-server)#max-interfaces all-available
- Use the default version to restore the default configuration. On dedicated tunnel-server ports, the default configuration is the maximum number of tunnel-service interfaces that the service module supports (all-available). On shared tunnel-server ports, the default configuration is zero tunnel-server interfaces.
- Use the no version to reduce the number of provisioned tunnel-service interfaces to zero. Issuing the no max-interfaces command has the same effect as issuing the max-interfaces 0 command.
- See max-interfaces.

reserve-bandwidth

- Use from Tunnel Server Configuration mode to reserve a percentage of the total bandwidth for forwarding on a shared tunnel-server port. The remaining bandwidth is used for tunnel processing.
- Specify the value of 80 to reserve 80 percent of the total bandwidth for forwarding. The remaining 20 percent is used for tunnel processing. Specify the value of 50 to reserve 50 percent of the total bandwidth for forwarding. The remaining 50 percent is used for tunnel processing. You may not always obtain the exact percentage of bandwidth specified because of the overhead involved with identifying and assigning incoming traffic to the appropriate resources. You may actually obtain a value less than the configured value.
- Examples
  host1(config-tunnel-server)#reserve-bandwidth 80 host1(config-tunnel-server)#reserve-bandwidth 50
- Use the no or default version to restore the default configuration. On shared tunnel-server ports, the default configuration reserves 90 percent of the total bandwidth for forwarding. The remaining 10 percent is used for tunnel processing.
- See reserve-bandwidth

tunnel-server

- Use from Global Configuration mode to specify the physical location of the tunnel-server port that you want to configure.
- The tunnel-server command accesses Tunnel Server Configuration mode, which enables you to provision the maximum number of tunnel-service interfaces to be used on the tunnel-server port.
- For ERX7xx models, ERX14xx models, and the ERX310 router , use the slot/port format.
- For the E120 and E320 Broadband Services Routers, use the slot/adapter/port format. On dedicated tunnel-server ports, use adapter 0 and port 0. On shared tunnel-server ports, use adapter 2 and port 0.
- Example
  host1(config)#tunnel-server 12/2
- Use the default version to restore the default configuration. On dedicated tunnel-server ports, the default configuration is the maximum number of tunnel-service interfaces that the service module supports. On shared tunnel-server ports, the default configuration is zero tunnel-service interfaces.
- Use the no version to reduce the number of provisioned tunnel-service interfaces to zero.
- See tunnel-server.