Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

tunnel-end-point

Syntax

tunnel-end-point tunnel-name {encapsulation-protocol [ protocol-options ];transport-protocol {destination-address destination-host-address;source-address source-host-address;}}

Hierarchy Level

[edit firewall],[edit logical-systems logical-system-name firewall]

Release Information

Statement introduced in Junos OS Release 12.3R2.

Description

On an MX Series router installed as an encapsulator (an ingress PE router) for filter-based IP tunneling, define a tunnel template. The template specifies a set of characteristics for transporting passenger protocol packets across an IP transport network.

Options

destination-host-address

IP address or address range of the de-encapsulator (the remote egress PE router).

encapsulation-protocol

Encapsulation protocol:

  • gre—Filter-based GRE encapsulation is supported on IPv4 transport networks.
protocol-options

(Optional) Protocol-specific encapsulation options:

  • key number—An integer value that uniquely identifies a GRE IPv4 tunnel if multiple traffic flows share the same source-address and destination-address pair. Range: 1 through 0xFFFFFFFF (4,294,967,295 decimal)

    If a tunnel definition specifies GRE IPv4 tunneling using a key, the system includes the key in the GRE header whenever a Packet Forwarding Engine is instructed to use that tunnel definition to encapsulate a packet.

source-host-address

IP address or address range of the encapsulator (the local ingress PE router).

transport-protocol

The IP network protocol used to transport encapsulated passenger protocol packets:

  • ipv4—IPv4 can transport IPv4, IPv6, or MPLS packets encapsulated using filter-based generic routing encapsulation (GRE).
tunnel-name

Name that identifies the tunnel template using a non-reserved string of not more than 64 characters. To include spaces in the name, enclose it in quotation marks (“ ”). You can reference a tunnel template name in an ingress firewall filter of type inet, inet6, any, or mpls by configuring the encapsulate terminating action.

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.

Published: 2013-07-31