Interfaces

• Configuring LACP in J-Web

Configuring Network Interfaces

You can use J-Web to view and configure most network interfaces. The Interface Configuration page lists the interfaces added to the SRX Services Gateway:

1. Viewing and Configuring Interfaces
2. Configuring Fast Ethernet Interfaces
3. Configuring Gigabit Ethernet Interfaces
4. Configuring Logical Ethernet Interfaces
5. Configuring ATM-over-VDSL Interfaces
6. Configuring ATM-over-SHDSL Interfaces
7. Configuring ATM-over-ADSL Interfaces
8. Configuring 1-Port GE SFP Mini-PIM Interface Settings
9. 2-Port 10 Gigabit Ethernet XPIM Configuration Page Options
10. CT1/CE1 Interface Configuration Page Options
11. Configuring the DOCSIS Mini-PIM Interfaces

Viewing and Configuring Interfaces

To view a list of configurable network interfaces:

1. Select Configure>Interfaces.

   A list of network interfaces available on the services gateway is displayed along with the interface properties.

   Table 4 describes the fields displayed in the Interface Configuration page:

   Table 4: Interface Configuration Page Fields

   Fields	Description
   Interface	Interface name. Logical interfaces configured under this interface appear in a collapsible list under the physical interface.
   Admin status	Administrative status of the interface. This can be either up or down.
   Link Status	Operational status of the link. This can be either up or down.
   IP Address	Configured IP Addresses. Multiple IP addresses configured on one logical interface are displayed in a collapsible list under the logical interface.
   Zone	Security zone with which this interface is associated.
   MTU	Maximum transmission unit value for this physical interface
   Speed	Interface speed (10 Mbps, 100Mbps, 1Gbps, Auto)
   Link Mode	Whether the link mode for this interface is Active, Passive or set to None
   Auto Negotiation	Whether auto negotiation for this interface is Enabled or Disabled

   The list of interfaces displayed in the Interfaces Configuration page can be filtered to display information in specific contexts as listed in Table 5:

   Table 5: Interface Configuration Display Filtering Criteria

   Filter	Options
   Interface Type	List of interfaces available on the device.
   Interface State	Admin up, Link up, Admin up and Link down, Admin down
   Zone Association	List of security zones available

To filter the list of interfaces displayed:

1. Select the required filter and options as listed in Table 4.
2. Click Go (or click Clear to clear the list).

   A subset of interfaces, filtered by the selected filtering criteria, is displayed.

To configure properties for a network interface:

1. Select the interface from the list of interfaces in the Interface Configuration page.
2. Follow the instructions in one of the following topics:
   • Configuring Fast Ethernet Interfaces
   • Configuring Gigabit Ethernet Interfaces
   • Configuring Logical Ethernet Interfaces
   • Configuring ATM-over-VDSL Interfaces
   • Configuring ATM-over-SHDSL Interfaces
   • Configuring ATM-over-ADSL Interfaces

To enable or disable administration for an interface:

1. Select the physical interface from the list of interfaces in the Interface Configuration page.
2. Click Enable/Disable (toggle).
3. Click OK.

To delete a logical interface:

1. Select the interface from the list of interfaces in the Interface Configuration page.
2. Click Delete.
3. Click OK.

Configuring Fast Ethernet Interfaces

To configure a Fast Ethernet interface:

1. From the Interface Configuration page, select the Fast Ethernet interface you want to configure.
2. Click Edit. The properties you can configure on a Fast Ethernet interface are displayed.
3. Enter information into the General tab of the Fast Ethernet Configuration property sheet, as described in Table 6.
4. Click OK.

   Table 6: Fast Ethernet Interface Configuration Summary

   Field/Control	Function	Your Action
   Description	(Optional) Adds supplementary information about the physical Fast Ethernet interface.	Type a description for the Fast Ethernet interface to clearly identify it in monitoring displays.
   MTU (Bytes)	Specifies the maximum transmission unit size for the Fast Ethernet interface.	Type a value between 256 bytes and one of the following values: For built-in Fast Ethernet interfaces and Dual-Port Fast Ethernet PIM interfaces, 9192 bytes For 4-Port Fast Ethernet ePIM interfaces, 1514 bytes The default MTU for Fast Ethernet interfaces is 1518.
   Speed	Specifies the required transmission speed for this interface.	Select the required transmission speed for this interface from the following options: 10Mbps 100Mbps None
   Link Mode	Specifies the link mode.	Select one of the following link modes: Half Duplex Full Duplex None
   Enable Loopback	Enables or disables the loopback option for this interface.	Select or clear this check box to enable or disable the loopback diagnostic option.
   Enable Flow Control	Enables or disables the flow control option for this interface.	Select or clear this check box to enable or disable flow control.
   Enable Per Unit Scheduler	Enables or disables scheduling on logical interfaces. Enables you to configure multiple output queues on a logical interface and associate an output scheduler and shaping rate with the queues.	Select or clear this check box to enable or disable scheduling.
   Enable Vlan Tagging	Specifies whether Van Tagging is enabled or disabled for this interface. When VLAN Tagging is disabled, only unit 0 can be configured. When VLAN Tagging is enabled, other units besides unit 0 can be configured. When VLAN Tagging is disabled, configured VLAN IDs for logical interfaces must be deleted, because a VLAN ID can only be specified on tagged Ethernet interfaces. When VLAN Tagging is enabled, you must configure a VLAN ID for the existing configured logical interfaces (if any) because a VLAN ID must be specified on tagged Ethernet interfaces. Family Ethernet switching cannot be enabled on VLAN-tagged interfaces.	Select or clear this check box to enable or disable VLAN Tagging.
   Source MAC Filter	Specifies the hardware media access control (MAC) address associated with the ARP address. The MAC address uniquely identifies the system and is expressed in the following format: mm:mm:mm:ss:ss:ss. The first three octets denote the hardware manufacturer ID, and the last three are serial numbers identifying the device.	To add a MAC address: Click Add. Type the MAC address to be mapped to the ARP entry (for example, 00:12:1E:A9:8A:80). To delete a MAC address: Select the check box for a MAC address. Click Delete.

Configuring Gigabit Ethernet Interfaces

To configure a Gigabit Ethernet interface:

1. From the Interface Configuration page, select the Gigabit Ethernet interface you want to configure.
2. Click Edit. The properties you can configure on a Gigabit Ethernet interface are displayed.
3. Enter information into the General tab of the Gigabit Ethernet Configuration property sheet, as described in Table 7:
4. Click OK.

   Table 7: Gigabit Ethernet Interface Configuration Summary

   Field/Control	Function	Your Action
   Description	(Optional) Adds supplementary information about the physical Gigabit Ethernet interface.	Type a description for the Gigabit Ethernet interface to clearly identify it in monitoring displays.
   MTU (Bytes)	Specifies the maximum transmission unit size for the Gigabit Ethernet interface.	Type a value between 256 and 9014 bytes. The default MTU for Gigabit Ethernet interfaces is 1514.
   Speed	Specifies the required transmission speed for this interface.	Select the required transmission speed for this interface from the following options: 10Mbps 100Mbps 1Gbps None
   Link Mode	Specifies the link mode.	Select one of the following link modes: Half Duplex Full Duplex None
   Enable Loopback	Enables or disables the loopback option for this interface.	Select or clear this check box to enable or disable the loopback diagnostic option.
   Enable Flow Control	Enables or disables the flow control option for this interface.	Select or clear this check box to enable or disable flow control.
   Enable Auto Negotiation	Specifies whether Auto Negotiation is enabled for this interface.	Select or clear this check box to enable or disable auto negotiation.
   Enable Per Unit Scheduler	Enables or disables scheduling on logical interfaces. Enables you to configure multiple output queues on a logical interface and associate an output scheduler and shaping rate with the queues.	Select or clear this check box to enable or disable scheduling.
   Enable Van Tagging	Specifies whether Van Tagging is enabled for this interface.	Select or clear this check box to enable or disable Van tagging.
   Source MAC Filter	Specifies the list of hardware media access control (MAC) address for devices from which you want to receive traffic on this interface.	To add a MAC address: Click Add. Type the MAC address to be mapped to the ARP entry (for example, 00:12:1E:A9:8A:80). To delete a MAC address: Select the check box for a MAC address. Click Delete.

Configuring Logical Ethernet Interfaces

You can use J-Web to configure logical interfaces on your Fast Ethernet or Gigabit Ethernet interfaces. You must have at least one logical interface configured on your physical Ethernet interface.

To configure a logical interface on a Fast Ethernet or Gigabit Ethernet interface:

1. From the Interface Configuration page, select the Ethernet interface on which you want to configure a logical interface.
2. Click Add>Logical Interface. The properties you can configure on a logical interface are displayed.
3. Configure the logical interface properties in the General tab. You can also configure IPv4, IPv6, and Ethernet Switching parameters in the respective tabs as required. Table 8 describes the configuration options:

   Table 8: Logical Ethernet Interface Configuration Summary

   Field/Control	Function	Your Action
   Unit	Specifies a unique number for the logical interface unit.	Type a number for the unit.
   Description	(Optional) Describes the logical interface.	Type a description for the logical interface to clearly identify it in monitoring displays.
   Zone	Specifies a security zone with which to associate this logical interface.	Select a security zone from the list of available zones, or select None.
   VLAN ID	Specifies a VLAN ID for this logical interface.	Type a VLAN ID for this logical interface. Note: The VLAN ID text field is disabled when VLAN Tagging is not enabled.
   IPv4 Address (Select the check box to activate this tab.
   IPv4 Address	Specifies an IPv4 IP address to be associated with this interface.	Type a valid IPv4 IP address.
   Subnet	Specifies a subnet for the IP address.	Select a subnet in the range of 1 through 32.
   Web auth	Specify whether this IP address should be designated for web authentication.	Select or clear the checkbox to enable or disable this IP address for web authentication.
   ARP	Enables the device to create a static Address Resolution Protocol (ARP) entry for this interface by specifying the IP address of a node to associate with its media access control (MAC) address. The IP address must be in the same subnet as the IPv4 address or prefix of the interface you are configuring. Static ARP entries associate the IP addresses and MAC addresses of nodes on the same subnet, enabling a device to respond to ARP requests having destination addresses that are not local to the incoming interface	To create a static ARP entry: Click Edit. In the ARP Address window, click Add. Type the MAC address to be mapped to the ARP entry (for example, 00:12:1E:A9:8A:80). Select the check box for Publish if you wish to enable the device to reply to ARP requests for the specified address.
   IPv6 Address (Select the check box to activate this tab.) This enables you to add IPv6 address to this logical interface.
   IPv6 Address	Specifies an IPv6 address to be associated with this interface.	Type a valid IPv6 address.
   Subnet	Specifies a subnet for the IP address.	Select a subnet in the range of 1 through 32.
   Ethernet Switching (Select the check box to activate this tab.) This enables you to configure Ethernet switching for this logical interface.
   Port Mode	Specifies whether this interface operates in Access or Trunk mode.	Select Access mode to restrict the interface to a single VLAN. Access interfaces typically connect to network devices such as PCs, printers, IP telephones, and IP cameras. Select Trunk mode to allow the interface to be in multiple VLANs and multiplex traffic between different VLANs.
   VLAN Member	Specifies the VLAN with which this interface is to be associated.	Select the VLAN from the list.
   VoIP VLAN	Specifies the VoIP VLAN with which this interface is to be associated.	Select the VoIP VLAN from the list.

Configuring ATM-over-VDSL Interfaces

To configure an ATM-over-VDSL interface:

1. From the Interface Configuration page, select the at-pim/port interface you want to configure.
2. Click Edit. The properties you can configure on an ATM-over-VDSL interface are displayed.
3. Enter information in the VDSL interface configuration property sheet, as described in Table 9.
4. Click OK.

   Table 9: VDSL Interface Configuration Summary

   Field /Control	Function	Your Action
   MTU (Bytes)	Specifies the maximum transmission unit size for the VDSL interface.	Type a value between 256 and 9192.
   VDSL Profile	Specifies a VDSL profile to apply to this interface.	Select a VDSL profile from the list.
   Description	(Optional) Adds supplementary information about the physical ATM-over-VDSL profile.	Type a description of the physical ATM-over-VDSL interface to clearly identify it in monitoring displays. Specify that it is a VDSL interface.

Configuring ATM-over-SHDSL Interfaces

To configure an ATM-over-SHDSL interface:

1. From the Interface Configuration page, select the at-pim/0/port interface you want to configure.
2. Click Edit. The properties you can configure on an ATM-over-SHDSL interface are displayed.
3. Enter information in the SHDSL interface configuration property sheet, as described in Table 10.
4. Click OK.

   Table 10: ATM-over-SHDSL Interface Configuration Summary

   Field /Control	Function	Your Action
   MTU (Bytes)	Specifies the maximum transmission unit (MTU) size, in bytes, of a packet on the ATM-over-SHDSL interface.	Type a value between for the byte size (for example, 1500).
   Encapsulation	Selects the type of encapsulation for traffic on the physical interface.	Select one of the following types of encapsulation: ATM permanent virtual circuits—Use this type of encapsulation for PPP over ATM (PPPoA) over SHDSL interfaces. This is the default encapsulation for ATM-over-SHDSL interfaces. Ethernet over ATM encapsulation—Use this type of encapsulation for PPP over Ethernet (PPPoE) over ATM-over-SHDSL interfaces that carry IPv4 traffic.
   Description	(Optional) Adds supplementary information about the physical ATM-over-SHDSL profile.	Type a description of the physical ATM-over-SHDSL interface to clearly identify it in monitoring displays. Specify that it is an ATM-over-SHDSL interface.
   VPI	Specifies the ATM virtual path identifier (VPI) for the interface.	Type a number between 0 and 255 (for example, 25).
   PIC Mode	Specifies the mode on the ATM-over-SHDSL interface.	Select either of the following: 1-port-atm—1-port four-wire mode 2-port-atm—2-port two-wire mode.
   Annex	Specifies the type of annex for the interface. Annex defines the System Reference Model for connecting DSL networks to the plain old telephone service (POTS).	Select one of the following: Annex A—Used in North American network implementations. Annex B—Used in European network implementations.
   Line rate	Specifies the available line rates, in kilobits per second, to use on a G.SHDSL interface.	Select the appropriate value. For 2-port-atm mode, you can select auto, which automatically selects a line rate.
   Loopback	Specifies the type of loopback testing for the interface. Loopback testing is a diagnostic procedure in which a signal is transmitted and returned to the sending device after passing through all or a portion of a network or circuit. The returned signal is compared with the transmitted signal in order to evaluate the integrity of the equipment or transmission path.	Select one of the following: local—Used for testing the SHDSL equipment with local network devices. payload—Used to command the remote configuration to send back the received payload. remote—Used to test SHDSL with a remote network configuration.
   Current SNR Margin	Specifies the signal-to-noise ratio (SNR) margin or disables SNR.	Select or clear the checkbox to enable or disable SNR margin. To configure a specific value, type a number from 0 to 10 (for example, 5). The range is 0 dB to 10 dB with a default value of 0.
   SNEXT SNR Margin	Sets a value, from –10 dB to 10 dB, for the self-near-crosstalk (SNEXT) SNR margin, or disables SNEXT.	Select or clear the checkbox to enable or disable SNEXT SNR margin. To configure a specific value, type a number from –10 to 10 (for example, 5).

Configuring ATM-over-ADSL Interfaces

To configure an ATM-over-ADSL interface:

1. From the Interface Configuration page, select the at-pim/0/port interface you want to configure.
2. Click Edit. The properties you can configure on an ATM-over-ADSL interface are displayed.
3. Enter information in the ADSL interface configuration property sheet, as described in Table 11.
4. Click OK.

   Table 11: ADSL Interface Configuration Summary

   Field /Control	Function	Your Action
   MTU (Bytes)	Specifies the maximum transmission unit size for the ADSL interface.	Type a value between 256 and 9192.
   Encapsulation	Selects the type of encapsulation for traffic on this physical interface.	Select one of the following types of encapsulation: ATM permanent virtual circuits—Use this type of encapsulation for PPP over ATM (PPPoA) over ADSL interfaces. This is the default encapsulation for ATM-over-ADSL interfaces. Ethernet over ATM encapsulation—Use this type of encapsulation for PPP over Ethernet (PPPoE) over ATM-over-ADSL interfaces that carry IPv4 traffic.
   VPI	Specifies the ATM virtual path identifier (VPI) for the interface.	Type a VPI value between 0 and 255.
   Operating Mode	Specifies the type of DSL operating mode for the ATM-over-ADSL interface.	From the list, select one of the following types of DSL operating modes (for example, auto). For Annex A or Annex B, or Annex M (applicable to SRX210 devices), select one of the following: auto—Configure the ADSL interface to auto negotiate settings with the DSLAM located at the central office. For Annex A, the ADSL interface trains in either ANSI T1.413 Issue II mode or ITU G.992.1 mode. For Annex B, the ADSL interface trains in ITU G.992.1 mode. For Annex M, the ADSL interface trains in ITU G.992.3 mode (applicable to SRX210 devices). itu-dmt-bis—Configure the ADSL interface to train in ITU G.992.3 mode. The ADSL interface trains in ITU G.992.5 mode. adsl2plus—Configure the ADSL interface to train in ITU G.992.5 mode. You can configure this mode only when it is supported on the DSLAM. For Annex A and Annex B, select the following: itu-dmt—Configure the ADSL interface to train in ITU G.992.1 mode. adsl2plus—Configure the ADSL interface to train in ITU G.992.5 mode. You can configure this mode only when it is supported on the DSLAM. itu-dmt-bis—Configure the ADSL interface to train in ITU G.992.3 mode. The ADSL interface trains in ITU G.992.5 mode. For Annex A only, select the following: ansi-dmt—Configure the ADSL interface to train in the ANSI T1.413 Issue II mode. For Annex B only, select the following: itu-annexb-ur2—Configure the ADSL line to train in the G.992.1 Deutsche Telekom UR-2 mode.
   Description	(Optional) Adds supplementary information about the physical ATM-over-ADSL profile.	Type a description of the physical ATM-over-ADSL interface to clearly sidentify it in monitoring displays. Specify that it is an ADSL interface.

Configuring 1-Port GE SFP Mini-PIM Interface Settings

Table 12 describes the available options for configuring the 1-Port GE SFP Mini-PIM.

Table 12: Configuring the 1-Port GE SFP Mini-PIM Interface Settings

Field		Function	Action
Physical Interfaces
Edit		Allows you to edits the 1-Port GE SFP Mini-PIM physical interface settings.	Select Edit on the task bar and update the following fields:
	Description	Specifies a description for the 1-Port GE SFP Mini-PIM.	Enter a description updated for the Mini-PIM.
	Speed (Mbps/Gbps)	Specifies the link speed.	Select the link speed from 10Mbps, 100Mbps, or 1Gbps.
	MTU (Bytes)	Specifies the maximum transmission unit size for the Mini-PIM.	Enter an integer value from 256 through 9010 bytes.
	Link Mode	Specifies the link mode.	Select the link mode from half-duplex or full-duplex
	Enable Loopback	Enables loopback functionality.	Select the Enable Loopback check box.
	Enable Auto Negotiation	Enables autonegotiation functionality to choose common link speed and link duplex mode.	Select the Enable Auto Negotiation check box.
	Enable Per Unit Scheduler	Enables the per unit scheduler.	Select the Enable Per Unit Scheduler check box.
	Enable VLAN Tagging	Enables VLAN Tagging.	Select the Enable VLAN Tagging check box.
Disable		Disables the 1-Port GE SFP Mini-PIM Interface.	Select the 1-Port GE SFP Mini-PIM Interface and then click Disable.
Logical Interfaces
Add		Adds the logical interface for the 1-Port GE SFP Mini-PIM.	Click Add on the task bar and then click Logical Interface and update the following fields:
	Description	Describes the Mini-PIM’s logical interface.	Enter a description for the 1-Port GE SFP Mini-PIM logical Interface.
	Unit	Specifies the configured unit.	Enter the unit number.
	Zone	Specifies the security zone with which this interface is associated.	Select a zone from the list — trust, untrust, or junos-global
	Family	Specifies the family protocol type to which the 1-Port GE SFP Mini-PIM logical Interface is added.	Select the IPv4 tab and then select Enable DHCP or Enable address configuration OR Select the IPv6 tab and then add the IPv6 address.
Edit		Allows you to edit the 1-Port GE SFP Mini-PIM logical interface.	Select the logical interface and then click Edit on the task bar and update the following fields:
	Description	Describes the Mini-PIM logical interface.	Enter a description for the 1-Port GE SFP Mini-PIM Interface.
	Unit	Specifies the configured unit.	Enter the unit number.
	Zone	Specifies the security zone with which this interface is associated.	Select a zone from the list — trust, untrust, or junos-global
	Family	Specifies the family protocol type to which the 1-Port GE SFP Mini-PIM logical Interface is added.	Select the IPv4 tab and then select Enable DHCP or Enable address configuration. OR Select the IPv6 tab and then add the IPv6 address.
Delete		Deletes the 1-Port GE SFP Mini-PIM logical interface.	Select the logical interface and then click Delete.

2-Port 10 Gigabit Ethernet XPIM Configuration Page Options

Table 13 describes the available options for the 2-Port 10 Gigabit XPIM configuration page.

CT1/CE1 Interface Configuration Page Options

Table 14 and Table 15 describe the available options for the CT1/CE1 Interface Configuration page.

Configuring the DOCSIS Mini-PIM Interfaces

Table 16 describes the available options for the Data over Cable Service Interface Specifications Mini-Physical Interface Module (DOCSIS Mini-PIM) page.

Configuring LACP in J-Web

Use the link aggregation feature to aggregate one or more Ethernet interfaces to form a virtual link or link aggregation group (LAG). The MAC client can treat this virtual link like a single link. Link aggregation increases bandwidth, provides graceful degradation as failure occurs, and increases availability.

You can use the J-Web interface to add a new LAG or to edit or delete an existing LAG.

Note: The interfaces that are already configured with MTU, duplex, flow control, or logical interfaces are displayed. However, when you select an already configured interface, a warning message is displayed.

To access the LACP Configuration:

1. In the J-Web user interface, select Configure>Interfaces>Link Aggregation.

   The Aggregated Interfaces list is displayed.

2. Click one of the following:
   • Device Count—Creates an aggregated Ethernet interface, or LAG. You can choose the number of device that you want to create. Information displayed on the link aggregation page are specified in Table 17 and the details of aggregation are specified in Table 18
   • Add—Adds a new aggregated Ethernet Interface, or LAG. Enter information as specified in Table 19.
   • Edit— Modifies a selected LAG
     • Aggregation—Modifies an selected LAG. Enter information as specified in Table 19.
     • VLAN—Specifies VLAN options for the selected LAG. See Table 20 for details on the options.
     • IP Option—Configuring IP address to LAG is not supported and when you try to configure the IP address an error message is displayed.
   • Delete—Deletes the selected LAG.
   • Disable Port or Enable Port—Disables or enables the administrative status on the selected interface.
3. Click one:
   • Click OK to check your configuration and save it as a candidate configuration, then click Commit Options>Commit.
   • Click Cancel to cancel the configuration without saving changes.