[ Contents] [ Prev] [ Next] [ Report an Error]

ES PIC

Image g001821.gif

Software release
  • JUNOS 6.2 and later (Type 1)
Description
  • High-bandwidth encryption (in accordance with IPSec standards)
  • Power requirement: 0.21 A @ 48 V (10 W)
  • Support for IPSec encryption, decryption, and key calculation acceleration
The ES PIC does not support reassembly and decryption of encrypted packets that were fragmented in an IPSec tunnel.
Hardware features
  • Extends the existing security functionality to Internet traffic at high-performance rates
  • Throughput at 800 Mbps, half duplex
  • 1000 IPSec tunnels or 2000 IPSec security association (SA) pairs
  • Supports MTUs of up to 3900 bytes
Software featuresFor a list of the software features available for services PICs, see the JUNOS Services Interfaces Configuration Guide.
  • Support for IPv4
  • Authentication hash algorithms: MD-5 and SHA-1
  • Encryption algorithms: DES, 3-DES, and Null
  • Automated key management using Diffie-Hellman key establishment
  • Support for preshared key management
  • Authentication Header and Encapsulating Security Payload (ESP) independently or in bundle mode
  • Tunnel mode IPSec encryption and decryption for data traffic
  • Transport mode IPSec encryption and decryption for control traffic
  • Static and dynamic security associations (SA) supported
  • SA lifetime configurable in seconds and kilobytes
  • JUNOS Release 7.0 or later is required to configure graceful Routing Engine switchover (GRES).
LEDsOne tricolor:
  • Off—Not enabled
  • Green—Online with no alarms or failures
  • Amber—Online with alarms for remote failures
  • Red—Active with a local alarm; router has detected a failure
Instrumentation (counters)
  • Input and output bytes per tunnel
  • Total authentication failures
  • Total antireply failures
  • Total encryption ASIC errors per PIC

[ Contents] [ Prev] [ Next] [ Report an Error]