Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Understanding Services PICs

Services PICs-Overview

Interfaces used in router networks can be broadly classified into two:

  • Networking interfaces, such as Ethernet and SONET interfaces, that primarily provide traffic connectivity. For more information on these interfaces, see the Interfaces Fundamentals for Routing Devices guide.

  • Services interfaces, such as Adaptive Services interfaces and Multiservices interfaces, that provide specific capabilities for manipulating traffic before it is delivered to its destination.

For information about which platforms support Adaptive Services and MultiServices PICs and their features, see Enabling Service Packages.

For information about PIC support on a specific Juniper Networks M Series Multiservice Edge Router or T Series Core Router, see the appropriate PIC Guide for the platform.

Services interfaces enable you to add services to your network incrementally. Junos OS supports the following services interfaces:

Adaptive Services and Multiservices PICs

Adaptive Services [AS] PICs and Multiservices PICs enable you to perform multiple services on the same PIC by configuring a set of services and applications. The AS and Multiservices PICs offer a range of services that you can configure in one or more service sets. The following are some of the services you can configure on Adaptive services or multiservices interfaces:

  • Class-of-service

  • Intrusion detection service (IDS)

  • IP Security (IPsec)

  • Layer 2 tunneling protocols

  • Monitoring services

  • Network Address Translation (NAT)

  • Stateful firewalls

  • Voice services

For more information about these services, see Adaptive Services and Multiservices Interfaces Overview.

Note:

On Juniper Networks MX Series 5G Universal Routing Platforms, the Multiservices DPC provides essentially the same capabilities as the Multiservices PIC. The interfaces on both platforms are configured in the same way.

Encryption Services (ES) PIC

ES PIC provides a security suite for the IP version 4 (IPv4) and IP version 6 (IPv6) network layers. The suite provides functionality such as authentication of origin, data integrity, confidentiality, replay protection, and nonrepudiation of source. It also defines mechanisms for key generation and exchange, management of security associations, and support for digital certificates. For more information about encryption interfaces, see Configuring Encryption Interfaces.

Multilink Services and Link Services PICs

Multilink Services and Link Services PICs enable you to split, recombine, and sequence datagrams across multiple logical data links. The goal of multilink operation is to coordinate multiple independent links between a fixed pair of systems, providing a virtual link with greater bandwidth than any of the members. The Junos OS supports two services PICs based on the Multilink Protocol: the Multilink Services PIC and the Link Services PIC.

For more information about multilink and link services interfaces, see Link and Multilink Services Interfaces User Guide for Routing Devices.

Monitoring Services PICs

Monitoring Services PICs enable you to monitor traffic flow and export the monitored traffic. Monitoring traffic allows you to perform the following tasks:

  • Gather and export detailed information about IPv4 traffic flows between source and destination nodes in your network.

  • Sample all incoming IPv4 traffic on the monitoring interface and present the data in cflowd record format.

  • Perform discard accounting on an incoming traffic flow.

  • Encrypt or tunnel outgoing cflowd records, intercepted IPv4 traffic, or both.

  • Direct filtered traffic to different packet analyzers and present the data in its original format.

For more information about flow monitoring interfaces, see Monitoring, Sampling, and Collection Services Interfaces User Guide.

Tunnel Services PIC

Tunnel Services PIC provides a private, secure path through an otherwise public network by encapsulating arbitrary packets inside a transport protocol. Tunnels connect discontinuous subnetworks and enable encryption interfaces, virtual private networks (VPNs), and MPLS.

For more information about tunnel interfaces, see Tunnel Services Overview.

Multiservices MIC and Multiservices MPC

The Multiservices Modular Interfaces Card (MS-MIC) and the Multiservices Modular PIC Concentrator (MS-MPC), introduced in Junos OS Release 13.2, provide improved scaling and high performance. The MS-MIC and MS-MPC have enhanced memory (16 GB for MS-MIC, 32 GB per NPU of MS-MPC) and processing capabilities.

The services interfaces on MS-MPC and MS-MIC are identified in the configuration with an ms- prefix (for example, ms-1/2/1).

The following services packages come preinstalled and preconfigured on MS-MICs and MS-MPCs in Junos OS Release 13.2:

  • Junos Traffic Vision (formerly referred to as Jflow/Flow Monitoring)

  • Junos Address Aware (formerly referred to as NAT features)

  • Junos VPN Site Secure (formerly referred to as IPsec features)

  • Junos Network Secure (formerly referred to as the Stateful Firewall feature)

For information about MS-MIC and MS-MPC, see Multiservices MIC and Multiservices MPC (MS-MIC and MS-MPC) Overview.

Multiservices MIC and Multiservices MPC (MS-MIC and MS-MPC) Overview

Juniper Networks MX Series routers supports the Multiservices Modular Interfaces Card (MS-MIC) and the Multiservices Modular PIC Concentrator (MS-MPC) that provide improved scaling and high performance.

The services interfaces on MS-MPC and MS-MIC are identified in the configuration with an ms- prefix (for example, ms-1/2/1). The following services packages come preinstalled and preconfigured on MS-MICs and MS-MPCs:

  • Junos Traffic Vision (formerly referred to as Jflow)

  • Junos Address Aware (formerly referred to as NAT features)

  • Junos VPN Site Secure (formerly referred to as IPsec features)

  • Junos Network Secure (formerly referred to as the Stateful Firewall feature)

  • Junos Services Crypto Base PIC Package

  • Junos Services Application Level Gateways

Note:

You can check the default packages on an MS-MIC or MS-MPC by executing the show extension-provider system packages interface ms-interace operational mode command.

The MS-MPC on your MX Series router supports a maximum of two million active routes only. If the number of active routes exceeds this threshold, the heap memory used by the Packet Forwarding Engine is exhausted. As a result, the MS-MPC becomes unresponsive.

The MS-MIC supports the following Layer 3 services such as stateful firewall, NAT, IPsec, active flow monitoring, RPM, and graceful Routing Engine switchover (GRES). For more information on the supported features, see Protocols and Applications Supported by the MS-MIC and MS-MPC.

The MS-MIC and MS-MPC also support the captive portal content delivery (HTTP redirect) service package when configured for installation using the set chassis operational mode command.

Note:
  • Starting with Junos OS Release 14.2, the MX104 router supports two MS-MICs. Also, graceful Routing Engine switchover (GRES) is not supported for MS-MIC on the MX104 router.

  • Starting from Junos OS Release 18.1R1, Junos Node Slicing supports assignment of MS-MICs and MS-MPCs to guest network functions (GNFs), or partitions created on a router by using Junos Node Slicing.

  • Starting with Junos OS Release 19.2R1, the MX2020 router supports 15 MS-MPC cards.

Table 1 lists the platforms on which the MS-MIC and MS-MPC are supported.

Table 1: MX Series Routers That Support MS-MIC and MS-MPC
 

MX5

MX10

MX40

MX80

MX104

MX240

MX480

MX960

MX2008

MX2010

MX2020

MS-MIC

Yes

Yes

Yes

Yes

Yes

Note:

MX104 is first supported in Junos OS Release 13.3R2.

Yes

Yes

Yes

Yes

Yes

Yes

Note:

Only Junos Traffic Vision is supported.

MS-MPC

No

No

No

No

No

Yes

Yes

Yes

Yes

Yes

Note:

MX2010 is first supported in Junos OS Release 14.1.

Yes

Note:

MX2020 is first supported in Junos OS Release 14.1.

You can install an MS-MIC on one of the following line cards:

  • MPC-Type1

  • MPC-Type2

  • MPC-Type3

For information about MS-MIC, MS-MPC, and MS-DPC support on a specific MX Series router, see the MX Series 5G Universal Routing Platform Interface Module Reference.

For information about services supported on Juniper Networks SRX Series Firewalls, see Feature Explorer.

Change History Table

Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.

Release
Description
19.2R1
Starting with Junos OS Release 19.2R1, the MX2020 router supports 15 MS-MPC cards.
18.1R1
Starting from Junos OS Release 18.1R1, Junos Node Slicing supports assignment of MS-MICs and MS-MPCs to guest network functions (GNFs), or partitions created on a router by using Junos Node Slicing.
14.2
Starting with Junos OS Release 14.2, the MX104 router supports two MS-MICs.
14.1
MX2010 is first supported in Junos OS Release 14.1.
14.1
MX2020 is first supported in Junos OS Release 14.1.
13.3R2
MX104 is first supported in Junos OS Release 13.3R2.