Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

IP Tunneling

  • Support for IPv4 and IPv6 unicast IP-over-IP (IPv4) filter based decapsulation (QFX5130-32CD and QFX5220)—Starting in Junos OS Evolved Release 21.2R1, we provide support for filter-based decapsulation for IP-over-IP and GRE tunnels. By using the feature, you can decapsulate any source IP address, destination IP addresses, and any range of prefixes. You can use the feature in in deployments where the transit router has to decapsulate the IP-over-IP packets and forward them based on their inner destination IP address. You can configure the feature for IP-over-IP and GRE tunnels by using the following configurations at the [edit] hierarchy level:

    set firewall family inet filter <filter name> term <ipip-decap-term-name> from source-address <address> from destination address <destination address> from protocol ipip then decapsulate ipip routing-instance <name of the routing instance>

    set firewall family inet filter <filter name> term <ipip-decap-term-name> from source-address <address> from destination address <destination address> from protocol gre then decapsulate gre routing-instance <name of the routing instance>

    Note:

    Note: On QFX5220 both source and destinations IP addresses must be configured with /32 mask.

    [See Overview of Next-Hop-Based Dynamic Tunneling Using IP-Over-IP Encapsulation and Example: Configuring Next-Hop-Based IP-Over-IP Dynamic Tunnels.]