[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring IPSec Services Interfaces

To configure an IPSec tunnel, you must configure the following services interfaces:

Inside services interface—Logical interface used to apply the service sets that define the behavior of the IPSec tunnel for outbound traffic (traffic whose next hop is inside the IPSec tunnel).
Outside services interface—Logical interface used to apply the service sets that define the behavior of the IPSec tunnel for inbound traffic (traffic whose next hop is outside the IPSec tunnel).

For the services to be applied, you must first define the logical interfaces to be used.

To configure IPSec inside services interfaces and outside services interfaces:

Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
Perform the configuration tasks described in Table 76.
If you are finished configuring the network, commit the configuration.
Go on to Configuring IPSec Service Sets.

Table 76: Configuring IPSec Interfaces

Task	J-Web Configuration Editor	CLI Configuration Editor
Navigate to the Interfaces level in the configuration hierarchy.	In the configuration editor hierarchy, select Interfaces.	From the top of the configuration hierarchy, enter edit interfaces
Configure the inside services interface for the IPSec tunnel. On the J-series Services Router, the services interface is always sp-0/0/0.unit. The logical interface must have a unit number other than 0. By default, the J-Web Quick Configuration uses the unit number 1001 for inside-service logical interfaces.	In the Interface field, click Add new entry. In the Interface name field, type sp-0/0/0, and click OK. In the Interface field, click sp-0/0/0. In the Unit field, click Add new entry. In the Interface unit number field, type 1001. In the Service domain box, select inside from the drop-down menu. In the Family field, click inet. Select the Primary box, and click OK.	Configure the services interface as an inside-service interface: set sp-0/0/0 unit 1001 service-domain inside Configure the services interface as an inet interface: set sp-0/0/0 unit 1001 family inet
Configure the outside services interface for the IPSec tunnel. On the J-series Services Router, the services interface is always sp-0/0/0.unit. The logical interface must have a unit number other than 0. By default, the J-Web Quick Configuration uses the unit number 2001 for outside-service logical interfaces.	In the Interface field, click Add new entry. In the Interface name field, type sp-0/0/0, and click OK. In the Interface field, click sp-0/0/0. In the Unit field, click Add new entry. In the Interface unit number field, type 2001. In the Service domain box, select outside from the drop-down menu. In the Family field, click inet. Select the Primary box, and click OK.	Configure the services interface as an outside-service interface: set sp-/0/0/0 unit 2001 service-domain outside Configure the services interface as an inet interface: set sp-0/0/0 unit 2001 family inet

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Interfaces level in the configuration hierarchy.

In the configuration editor hierarchy, select Interfaces.

From the top of the configuration hierarchy, enter

edit interfaces

Configure the inside services interface for the IPSec tunnel.

On the J-series Services Router, the services interface is always sp-0/0/0.unit. The logical interface must have a unit number other than 0. By default, the J-Web Quick Configuration uses the unit number 1001 for inside-service logical interfaces.

In the Interface field, click Add new entry.
In the Interface name field, type sp-0/0/0, and click OK.
In the Interface field, click sp-0/0/0.
In the Unit field, click Add new entry.
In the Interface unit number field, type 1001.
In the Service domain box, select inside from the drop-down menu.
In the Family field, click inet.
Select the Primary box, and click OK.

Configure the services interface as an inside-service interface:
set sp-0/0/0 unit 1001 service-domain inside
Configure the services interface as an inet interface:
set sp-0/0/0 unit 1001 family inet

Configure the outside services interface for the IPSec tunnel.

In the Interface field, click Add new entry.
In the Interface name field, type sp-0/0/0, and click OK.
In the Interface field, click sp-0/0/0.
In the Unit field, click Add new entry.
In the Interface unit number field, type 2001.
In the Service domain box, select outside from the drop-down menu.
In the Family field, click inet.
Select the Primary box, and click OK.

Configure the services interface as an outside-service interface:
set sp-/0/0/0 unit 2001 service-domain outside
Configure the services interface as an inet interface:
set sp-0/0/0 unit 2001 family inet

[Contents] [Prev] [Next] [Index] [Report an Error]