[ Contents] [ Prev] [ Next] [ Report an Error]

Adaptive Services II FIPS PIC (M7i Router)

Image g002301.gif

Software release

  • JUNOS 7.2 and later

Description

  • JUNOS-FIPS requires an Adaptive Services II FIPS PIC for external IPSec connections. See the Secure Configuration Guide for Common Criteria and JUNOS-FIPS for more information.
  • Supports tunnel services. This feature is included with the PIC and does not require an individual license.
  • Individual licenses must be purchased for additional services such as Network Address Translation (NAT), stateful firewall, intrusion detection services (IDS), IPSec. J-Flow accounting, and voice services. For information about which services are supported by PIC and platform type, see the JUNOS Services Interfaces Configuration Guide.
  • Power requirement: 0.4 A @ 48 V (19 W)

Hardware features

  • Support for up to 2000 service sets
  • Active monitoring on up to 1 million flows
  • Support for MTUs up to 9192 bytes for Gigabit Ethernet and SONET interfaces

Software features

For a list of the software features available for services PICs, see the JUNOS Services Interfaces Configuration Guide.

Depending on your JUNOS release and individual licenses, software features for this PIC can include:

  • Stateful firewall with packet inspection:
    • Detects SYN attacks, ICMP and UDP floods, and ping-of-death attacks
  • NAT for IP addresses
  • Port Address Translation (PAT) for port numbers
  • J-Flow accounting exports cflowd version 5 and version 8 records
  • Tunnel services:
    • IP-IP unicast tunneling
    • GRE unicast tunneling—Supports GRE fragmentation
    • PIM sparse mode unicast tunneling
    • Virtual tunnel interface for Layer 3 VPNs
  • IPSec encryption
  • Voice services:
    • Compressed Real-Time Protocol (CRTP)
  • Encapsulations:
    • Multilink Frame Relay (MLFR)
    • Multilink Point-to-Point Protocol (MLPP)

LEDs

Status LED, one tricolor:

  • Off—PIC is offline and it is safe to remove it from the chassis.
  • Green—PIC is operating normally.
  • Yellow—PIC is initializing.
  • Red—PIC has an error or failure and no further harm can be done by removing it from the chassis.

Application LED, one tricolor:

  • Off—Service is not running.
  • Green—Service is running under acceptable load.
  • Yellow—Service is overloaded.

[ Contents] [ Prev] [ Next] [ Report an Error]