Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Adaptive Services II FIPS PIC (M40e Router)

    Image g002302.gif

    Software release

    • Junos OS Release 8.0R2 and later (Type 1)

    Note: This PIC is not supported in Junos OS Release 8.1R1.

    Description

    • Junos-FIPS requires an Adaptive Services II FIPS PIC for external IPSec connections. See the Secure Configuration Guide for Common Criteria and Junos-FIPS for more information.
    • Tunnel services is included with the PIC and does not require an individual license.
    • Individual licenses must be purchased for additional services such as Network Address Translation (NAT), stateful firewall, intrusion detection services (IDS), IPSec. J-Flow accounting, and voice services. For information about which services are supported by PIC and platform type, see the Junos OS Services Interfaces Configuration Guide.
    • Power requirement: 0.4 A @ 48 V (19 W)

    Hardware features

    • Support for up to 2000 service sets
    • Active monitoring on up to 1 million flows
    • Support for MTUs up to 9192 bytes for Gigabit Ethernet and SONET interfaces

    Software features

    For a list of the software features available for services PICs, see the Junos OS Services Interfaces Configuration Guide.

    Depending on your Junos OS Release and individual licenses, software features for this PIC can include:

    • Stateful firewall with packet inspection:
      • Detects SYN attacks, ICMP and UDP floods, and ping-of-death attacks
    • NAT for IP addresses
    • Port Address Translation (PAT) for port numbers
    • J-Flow accounting exports cflowd version 5 and version 8 records
    • Tunnel services:
      • IP-IP unicast tunneling
      • GRE unicast tunneling—Supports GRE fragmentation
      • PIM sparse mode unicast tunneling
      • Virtual tunnel interface for Layer 3 VPNs
    • IPSec encryption
    • Voice services:
      • Compressed Real-Time Protocol (CRTP)
    • Encapsulations:
      • Multilink Frame Relay (MLFR)
      • Multilink Point-to-Point Protocol (MLPP)

    LEDs

    Status LED, one tricolor:

    • Off—PIC is offline and it is safe to remove it from the chassis.
    • Green—PIC is operating normally.
    • Yellow—PIC is initializing.
    • Red—PIC has an error or failure and no further harm can be done by removing it from the chassis.

    Application LED, one tricolor:

    • Off—Service is not running.
    • Green—Service is running under acceptable load.
    • Yellow—Service is overloaded.

    Published: 2010-10-28