[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Enabling Service Packages

For AS PICs, MultiServices PICs, and the internal Adaptive Services Module (ASM) in the M7i platform, there are two service packages: Layer 2 and Layer 3. Both service packages are supported on all adaptive services interfaces, but you can enable only one service package per PIC, with the exception of a combined package supported on the ASM. On a single routing platform, you can enable both service packages by installing two or more PICs on the platform.

Note: Graceful Routing Engine switchover (GRES) is automatically enabled on all services PICs and DPCs except the ES PIC. It is supported on all M-series and T-series platforms except for TX Matrix installations. Layer 3 services should retain state after switchover, but Layer 2 services will restart. For IPsec services, Internet Key Exchange (IKE) negotiations are not stored and must be restarted after switchover. For more information about GRES, see the JUNOS High Availability Configuration Guide.

You enable service packages per PIC, not per port. For example, if you configure the Layer 2 service package, the entire PIC uses the configured package. To enable a service package, include the service-package statement at the [edit chassis fpc slot-number pic pic-number adaptive-services] hierarchy level, and specify layer-2 or layer-3:

[edit chassis fpc slot-number pic pic-number adaptive-services]
service-package (layer-2 | layer-3);

To determine which package an AS PIC supports, issue the show chassis hardware command: if the PIC supports the Layer 2 package, it is listed as Link Services II, and if it supports the Layer 3 package, it is listed as Adaptive Services II. To determine which package a MultiServices PIC supports, issue the show chassis pic fpc-slot slot-number pic-slot slot-number command. The Package field displays the value Layer-2 or Layer-3.

Note: The ASM has a default option (layer-2-3) that combines the features available in the Layer 2 and Layer 3 service packages.

After you commit a change in the service package, the PIC is taken offline and then brought back online immediately. You do not need to manually take the PIC offline and online.

Note: Changing the service package causes all state information associated with the previous service package to be lost. You should change the service package only when there is no active traffic going to the PIC.

The services supported in each package differ by PIC and platform type. Table 4 lists the services supported within each service package for each PIC and platform. Some of these services are also available on J-series Services Routers, but they are implemented in a different way and do not use the Layer 2 and Layer 3 service packages. For more information, see the J-series Services Router Advanced WAN Access Configuration Guide.

On the AS and MultiServices PICs, link services support includes JUNOS software CoS components, LFI (FRF.12), MLFR end-to-end (FRF.15), MLFR UNI NNI (FRF.16), MLPPP (RFC 1990), and multiclass MLPPP. For more information, see Layer 2 Service Package Capabilities and Interfaces and Link Services IQ Interfaces Configuration Guidelines.

Note: The AS PIC II for Layer 2 Service is dedicated to supporting the Layer 2 service package only.

For additional information about Layer 3 services, see the JUNOS Feature Guide.

Table 4: AS and MultiServices PIC Services by Service Package, PIC, and Platform

Services

ASM

AS/AS2 PICs and MultiServices PICs

AS/AS2 and MultiServices PICs

AS2 and MultiServices PICs

AS2 and MultiServices PICs

Layer 2 Service Package (Only) M7i M7i, M10i, and M20 M40e and M120 M320, T320, and T640 TX Matrix

Link Services:

         
  • Link services

Yes

Yes

Yes

Yes

No

  • Multiclass MLPPP

Yes

Yes

Yes

Yes

No

Voice Services:

         
  • CRTP and LFI

Yes

Yes

Yes

Yes

No

  • CRTP and MLPPP

Yes

Yes

Yes

Yes

No

  • CRTP over PPP (without MLPPP)

Yes

Yes

Yes

Yes

No

Layer 3 Service Package (Only) M7i M7i, M10i, and M20 M40e and M120 M320, T320, and T640 TX Matrix

Security Services:

         
  • CoS

Yes

Yes

Yes

Yes

No

  • Intrusion detection system (IDS)

Yes

Yes

Yes

Yes

No

  • IPsec

Yes

Yes

Yes

Yes

No

  • NAT

Yes

Yes

Yes

Yes

No

  • Stateful firewall

Yes

Yes

Yes

Yes

No

Accounting Services:

         
  • Active monitoring

Yes

Yes

Yes

Yes

Yes

  • Dynamic flow capture (MultiServices 400 PIC only)

No

No

No

Yes

No

  • Flow-tap

Yes

Yes

Yes (M40e only)

Yes

No

  • Passive monitoring (MultiServices 400 PIC only)

No

Yes

Yes (M40e only)

Yes

No

  • Port mirroring

Yes

Yes

Yes

Yes

Yes

LNS Services:

         
  • L2TP LNS

Yes

Yes (M7i and M10i only)

Yes (M120 only)

No

No

Voice Services:

         
  • BGF

Yes

Yes

Yes

Yes

No

Layer 2 and Layer 3 Service Package (Common Features) M7i M7i, M10i, and M20 M40e and M120 M320, T320, and T640 TX Matrix

RPM Services:

         
  • RPM probe timestamping

Yes

Yes

Yes

Yes

No

Tunnel Services:

         
  • GRE (gr-fpc/pic/port)

Yes

Yes

Yes

Yes

Yes

  • GRE fragmentation (clear-dont-fragment-bit)

Yes

Yes

Yes

No

No

  • GRE key

Yes

Yes

Yes

Yes

No

  • IP-IP tunnels (ip-fpc/pic/port)

Yes

Yes

Yes

Yes

Yes

  • Logical tunnels (lt-fpc/pic/port)

No

No

No

No

No

  • Multicast tunnels (mt-fpc/pic/port)

Yes

Yes

Yes

Yes

Yes

  • PIM de-encapsulation (pd-fpc/pic/port)

Yes

Yes

Yes

Yes

Yes

  • PIM encapsulation (pe-fpc/pic/port)

Yes

Yes

Yes

Yes

Yes

  • Virtual tunnels (vt-fpc/pic/port)

Yes

Yes

Yes

Yes

Yes

Layer 2 Service Package Capabilities and Interfaces

When you enable the Layer 2 service package, you can configure link services. On the AS and MultiServices PICs and the ASM, link services include support for the following:

For the LSQ interface on the AS and MultiServices PICs, the configuration syntax is almost the same as for Multilink and Link Services PICs. The primary difference is the use of the interface-type descriptor lsq instead of ml or ls. When you enable the Layer 2 service package, the following interfaces are automatically created:

gr-fpc/pic/port
ip-fpc/pic/port
lsq-fpc/pic/port
lsq-fpc/pic/port:0
...
lsq-fpc/pic/port:N
mt-fpc/pic/port
pd-fpc/pic/port
pe-fpc/pic/port
sp-fpc/pic/port
vt-fpc/pic/port

Interface types gr, ip, mt, pd, pe, and vt are standard tunnel interfaces that are available on the AS and MultiServices PICs whether you enable the Layer 2 or the Layer 3 service package. These tunnel interfaces function the same way for both service packages, except that the Layer 2 service package does not support some tunnel functions, as shown in Table 4.

Interface type lsq-fpc/pic/port is the physical link services IQ (lsq) interface. Interface types lsq-fpc/pic/port:0 through lsq-fpc/pic/port:N represent FRF.16 bundles. These interface types are created when you include the mlfr-uni-nni-bundles statement at the [edit chassis fpc slot-number pic pic-number] option. For more information, see Link Services IQ Interfaces Configuration Guidelines and Link and Multilink Services Configuration Guidelines.

Note: Interface type sp is created because it is needed by the JUNOS software. For the Layer 2 service package, the sp interface is not configurable, but you should not disable it.


[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]