[an error occurred while processing this directive]

J-series™ Services Router Advanced WAN Access Configuration Guide Techpubs Home Report an Error Collapse TOC Index Entire manual as PDF		About This Guide Objectives Audience Document Conventions Related Juniper Networks Documentation Documentation Feedback Requesting Technical Support Multiprotocol Label Switching Overview MPLS and VPN Terms MPLS Overview Label Switching Label-Switched Paths Label-Switching Routers Labels Label Operations Penultimate Hop Popping LSP Establishment Static LSPs Dynamic LSPs Traffic Engineering with MPLS Point-to-Multipoint LSPs Point-to-Multipoint LSP Properties Point-to-Multipoint LSP Configuration Signaling Protocols Overview Label Distribution Protocol LDP Operation LDP Messages Resource Reservation Protocol RSVP Fundamentals Bandwidth Reservation Requirement Explicit Route Objects Constrained Shortest Path First Link Coloring VPN Overview VPN Components VPN Routing Requirements VPN Routing Information VRF Instances Route Distinguishers Route Targets to Control the VRF Table Types of VPNs Layer 2 VPNs Layer 2 Circuits Layer 3 VPNs Configuring Signaling Protocols for Traffic Engineering Signaling Protocol Overview LDP Signaling Protocol RSVP Signaling Protocol Before You Begin Configuring LDP and RSVP with a Configuration Editor Configuring LDP-Signaled LSPs Configuring RSVP-Signaled LSPs Verifying an MPLS Configuration Verifying an LDP-Signaled LSP Verifying LDP Neighbors Verifying LDP Sessions Verifying the Presence of LDP-Signaled LSPs Verifying Traffic Forwarding over the LDP-Signaled LSP Verifying an RSVP-Signaled LSP Verifying RSVP Neighbors Verifying RSVP Sessions Verifying the Presence of RSVP-Signaled LSPs Configuring Virtual Private Networks VPN Configuration Overview Sample VPN Topology Basic Layer 2 VPN Configuration Basic Layer 2 Circuit Configuration Basic Layer 3 VPN Configuration Before You Begin Configuring VPNs with a Configuration Editor Configuring Interfaces Participating in a VPN Configuring Protocols Used by a VPN Configuring MPLS for VPNs Configuring a BGP Session Configuring Routing Options for VPNs Configuring an IGP and a Signaling Protocol Configuring LDP for Signaling Configuring RSVP for Signaling Configuring a Layer 2 Circuit Configuring a VPN Routing Instance Configuring a VPN Routing Policy Configuring a Routing Policy for Layer 2 VPNs Configuring a Routing Policy for Layer 3 VPNs Verifying a VPN Configuration Pinging a Layer 2 VPN Pinging a Layer 3 VPN Pinging a Layer 2 Circuit Configuring CLNS VPNs CLNS Terms CLNS Overview Before You Begin Configuring CLNS with a Configuration Editor Configuring a VPN Routing Instance (Required) Configuring ES-IS Configuring IS-IS for CLNS Configuring CLNS Static Routes Configuring BGP for CLNS Verifying CLNS VPN Configuration Displaying CLNS VPN Configuration Configuring IPsec for Secure Packet Exchange IPsec Terms IPsec Overview Authentication and Encryption Algorithms in IPsec Authentication Methods in IPsec Preshared Keys Digital Certificates Certificate Revocation Lists (CRLs) Traffic Protection in IPsec Security Associations Dynamic Security Associations and IKE Protocol IPsec Modes Before You Begin Configuring an IPsec Tunnel with Quick Configuration Configuring IPsec with a Configuration Editor Configuring IPsec Manual Security Associations Configuring IPsec Dynamic Security Associations Configuring an IKE Proposal Configuring an IKE Policy Configuring an IPsec Proposal Configuring an IPsec Policy Configuring IPsec Rules Configuring IPsec Services Interfaces Configuring Service Sets Configuring a Local Gateway Configuring Next-Hop Services Interfaces Configuring Interface Service Sets Applying IPsec Rules to Service Sets Configuring a NAT Pool Configuring Digital Certificates for IPsec Tunnels Configuring a CA Profile with a Configuration Editor Requesting a CA Certificate from a CA Generating a Public and Private Key Pair Generating and Enrolling a Local Digital Certificate Loading a Digital Certificate on a Services Router Applying the Local Digital Certificate to an IPsec Tunnel Deleting a Digital Certificate Verifying the IPsec Tunnel Configuration Verifying IPsec Tunnel Statistics Multicast Overview Multicast Terms Multicast Architecture Upstream and Downstream Interfaces Subnetwork Leaves and Branches Multicast IP Address Ranges Notation for Multicast Forwarding States Dense and Sparse Routing Modes Strategies for Preventing Routing Loops Reverse-Path Forwarding for Loop Prevention Shortest-Path Tree for Loop Prevention Administrative Scoping for Loop Prevention Multicast Protocol Building Blocks Configuring a Multicast Network Before You Begin Configuring a Multicast Network with a Configuration Editor Configuring SAP and SDP (Optional) Configuring IGMP (Required) Configuring the PIM Static RP (Optional) Filtering PIM Register Messages from Unauthorized Groups and Sources (Optional) Rejecting Incoming PIM Register Messages on an RP Router Stopping Outgoing PIM Register Messages on a Designated Router Configuring a PIM RPF Routing Table (Optional) Verifying a Multicast Configuration Verifying SAP and SDP Addresses and Ports Verifying the IGMP Version Verifying the PIM Mode and Interface Configuration Verifying the PIM RP Configuration Verifying the RPF Routing Table Configuration Configuring Data Link Switching DLSw Terms DLSw Overview Switch-to-Switch Protocol for DLSw DLSw Operational Stages DLSw Capabilities Exchange DLSw Circuits Establishment Class of Service for DLSw DLSw Ethernet Redundancy DLSw Peer Preference and Load Balancing Before You Begin Configuring DLSw with Quick Configuration Configuring DLSw with a Configuration Editor Configuring Basic DLSw (Required) Configuring LLC Type 2 Properties on an Ethernet Interface Configuring DLSw on the Local Services Router Configuring DLSw on the Remote Services Router Configuring CoS for DLSw (Optional) Configuring DLSw Ethernet Redundancy (Optional) Configuring DLSw Peer Preference and Load Balancing (Optional) Clearing the DLSw Reachability Cache Verifying DLSw Configuration Displaying LLC Type 2 Properties on a Fast Ethernet Interface Displaying DLSw Capabilities Displaying DLSw Circuit State Displaying Details of a DLSw Circuit State Displaying DLSw Peers Displaying Details of DLSw Peers Displaying DLSw Reachability Information Displaying DLSw Ethernet Redundancy Properties Displaying DLSw Ethernet Redundancy Statistics Policy Framework Overview Policy Framework Terms Routing Policies Routing Policy Overview Routing Policy Terms Default and Final Actions Applying Routing Policies Routing Policy Match Conditions Routing Policy Actions Stateful Firewall Filters Stateful Firewall Filter Overview Stateful Firewall Filter Match Conditions Stateful Firewall Filter Actions Stateless Firewall Filters Stateless Firewall Filter Overview Stateless Firewall Filter Terms Chained Stateless Firewall Filters Planning a Stateless Firewall Filter Stateless Firewall Filter Match Conditions Stateless Firewall Filter Actions and Action Modifiers Network Address Translation NAT Overview Source Static NAT Source Dynamic NAT with NAPT Source Dynamic NAT Without NAPT Destination Static NAT Full-Cone NAT (Bidirectional NAT) NAT Components NAT Pools NAT Rules Configuring Routing Policies Before You Begin Configuring a Routing Policy with a Configuration Editor Configuring the Policy Name (Required) Configuring a Policy Term (Required) Rejecting Known Invalid Routes (Optional) Injecting OSPF Routes into the BGP Routing Table (Optional) Grouping Source and Destination Prefixes in a Forwarding Class (Optional) Configuring a Policy to Prepend the AS Path (Optional) Configuring Damping Parameters (Optional) Configuring NAT Before You Begin Configuring NAT with a Configuration Editor Configuring Basic Source Static NAT Configuring Destination Static NAT Statically Assigning NAT Addresses from a Dynamic Pool Configuring Full-Cone NAT Configuring NAT Rules Without Defining Pools Defining an Overload Pool or an Overload Prefix Defining Rules for Transparent NAT Applying NAT to an Interface Verifying NAT Configuration Displaying NAT Configurations Verifying NAT Configuring Stateful Firewall Filters and NAT Before You Begin Configuring a Stateful Firewall Filter with Quick Configuration Configuring a Stateful Firewall Filter with a Configuration Editor Verifying Stateful Firewall Filter Configuration Displaying Stateful Firewall Filter Configurations Verifying a Stateful Firewall Filter Configuring Stateless Firewall Filters Before You Begin Configuring a Stateless Firewall Filter with Quick Configuration Configuring IPv4 and IPv6 Stateless Firewall Filters Assigning IPv4 and IPv6 Firewall Filters to Interfaces Configuring a Stateless Firewall Filter with a Configuration Editor Stateless Firewall Filter Strategies Strategy for a Typical Stateless Firewall Filter Strategy for Handling Packet Fragments Configuring a Routing Engine Firewall Filter for Services and Protocols from Trusted Sources Configuring a Routing Engine Firewall Filter to Protect Against TCP and ICMP Floods Configuring a Routing Engine Firewall Filter to Handle Fragments Applying a Stateless Firewall Filter to an Interface Verifying Stateless Firewall Filter Configuration Displaying Stateless Firewall Filter Configurations Displaying Stateless Firewall Filter Logs Displaying Firewall Filter Statistics Verifying a Services, Protocols, and Trusted Sources Firewall Filter Verifying a TCP and ICMP Flood Firewall Filter Verifying a Firewall Filter That Handles Fragments Class-of-Service Overview CoS Terms Benefits of CoS CoS Across the Network JUNOS CoS Components Code-Point Aliases Classifiers Behavior Aggregate Classifiers Multifield Classifiers Forwarding Classes Loss Priorities Forwarding Policy Options Transmission Queues Schedulers Transmit Rate Delay Buffer Size Scheduling Priority Shaping Rate RED Drop Profiles Virtual Channels Policers for Traffic Classes Rewrite Rules How CoS Components Work CoS Process on Incoming Packets CoS Process on Outgoing Packets Default CoS Settings Default CoS Values and Aliases Forwarding Class Queue Assignments Scheduler Settings Default Behavior Aggregate Classifiers CoS Value Rewrites Sample Behavior Aggregate Classification Transmission Scheduling on J-series Services Routers Configuring Class of Service Before You Begin Configuring CoS with Quick Configuration Defining CoS Components Defining CoS Value Aliases Defining Forwarding Classes Defining Classifiers Defining Rewrite Rules Defining Schedulers Defining Virtual Channel Groups Assigning CoS Components to Interfaces Configuring CoS Components with a Configuration Editor Configuring a Policer for a Firewall Filter Configuring and Applying a Firewall Filter for a Multifield Classifier Assigning Forwarding Classes to Output Queues Configuring and Applying Rewrite Rules Configuring and Applying Behavior Aggregate Classifiers Configuring RED Drop Profiles for Congestion Control Configuring Schedulers Configuring and Applying Scheduler Maps Configuring and Applying Virtual Channels Configuring and Applying Adaptive Shaping for Frame Relay Configuring Strict High Priority for Queuing with a Configuration Editor Configuring Large Delay Buffers with a Configuration Editor Maximum Delay Buffer Sizes Available to Interfaces Delay Buffer Size Allocation Methods Specifying Delay Buffer Sizes for Queues Configuring a Large Delay Buffer on a Channelized T1 interface Verifying a CoS Configuration Verifying Multicast Session Announcements Verifying a Virtual Channel Configuration Verifying a Virtual Channel Group Configuration Verifying an Adaptive Shaper Configuration Index Index