close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Overview
- play_arrow Next Gen Services Overview
  - Next Gen Services Overview
- play_arrow Configuration Overview
- play_arrow Global System Logging Overview and Configuration
- play_arrow Next Gen Services SNMP MIBS and Traps
  - Next Gen Services SNMP MIBs and Traps
play_arrow Carrier Grade NAT (CGNAT)
- play_arrow Deterministic NAT Overview and Configuration
  - Deterministic NAPT Overview for Next Gen Services
  - Configuring Deterministic NAPT for Next Gen Services
- play_arrow Dynamic Address-Only Source NAT Overview and Configuration
  - Dynamic Address-Only Source Translation Overview
  - Configuring Dynamic Address-Only Source NAT for Next Gen Services
- play_arrow Network Address Port Translation Overview and Configuration
  - Network Address Port Translation (NAPT) Overview
  - Configuring Network Address Port Translation for Next Gen Services
  - Configuring Syslog Events for NAT Rule Conditions with Next Gen Services
- play_arrow NAT46
  - NAT46 Next Gen Services Configuration Examples
- play_arrow Stateful NAT64 Overview and Configuration
  - Stateful NAT64 Overview
  - IPv4 Addresses Embedded in IPv6 Addresses
  - Configuring Next Gen Services Stateful NAT64
- play_arrow IPv4 Connectivity Across IPv6-Only Network Using 464XLAT Overview and Configuration
  - 464XLAT Overview
  - IPv4 Addresses Embedded in IPv6 Addresses
  - Configuring 464XLAT Provider-Side Translator for IPv4 Connectivity Across IPv6-Only Network for Next Gen Services
- play_arrow IPv6 NAT Protocol Translation (NAT PT)
  - IPv6 NAT PT Overview
  - IPv6 NAT-PT Communication Overview
- play_arrow Stateless Source Network Prefix Translation for IPv6 Overview and Configuration
  - Stateless Source Network Prefix Translation for IPv6
- play_arrow Transitioning to IPv6 Using Softwires
  - 6rd Softwires in Next Gen Services
- play_arrow Transitioning to IPv6 Using DS-Lite Softwires
  - DS-Lite Softwires—IPv4 over IPv6 for Next Gen Services
  - Configuring Next Gen Services DS-Lite Softwires
  - DS-Lite Subnet Limitation
  - Protecting CGN Devices Against Denial of Service (DOS) Attacks
- play_arrow Reducing Traffic and Bandwidth Requirements Using Port Control Protocol
  - Port Control Protocol Overview
  - Configuring Port Control Protocol
- play_arrow Transitioning to IPv6 Using Mapping of Address and Port with Encapsulation (MAP-E)
  - Mapping of Address and Port with Encapsulation (MAP-E) for Next Gen Services
  - Equal Cost Multiple Path (ECMP) support for Mapping of Address and Port with Encapsulation (MAP-E)
- play_arrow Monitoring and Troubleshooting Softwires
  - Ping and Traceroute for DS-Lite
  - Monitoring Softwire Statistics
  - Monitoring CGN, Stateful Firewall, and Softwire Flows
- play_arrow Port Forwarding Overview and Configuration
  - Port Forwarding for Next Gen Services
- play_arrow Port Translation Features Overview and Configuration
  - Address Pooling and Endpoint Independent Mapping for Port Translation
  - Round-Robin Port Allocation
  - Secured Port Block Allocation for Port Translation
- play_arrow Static Source NAT Overview and Configuration
  - Static Source NAT Overview
  - Configuring Static Source NAT44 or NAT66 for Next Gen Services
- play_arrow Static Destination NAT Overview and Configuration
  - Static Destination NAT Overview
  - Configuring Static Destination NAT for Next Gen Services
- play_arrow Twice NAPT Overview and Configuration
  - Twice NAPT Overview
  - Configuring Twice NAPT for Next Gen Services
- play_arrow Twice NAT Overview and Configuration
  - Twice Static NAT Overview
  - Configuring Twice Static NAT44 for Next Gen Services
  - Twice Dynamic NAT Overview
  - Configuring Twice Dynamic NAT for Next Gen Services
- play_arrow Class of Service Overview and Configuration
  - Class of Service for Services PICs (Next Gen Services)
play_arrow Stateful Firewall Services
- play_arrow Stateful Firewall Services Overview and Configuration
  - Stateful Firewall Overview for Next Gen Services
  - Configuring Stateful Firewalls for Next Gen Services
play_arrow Intrusion Detection Services
- play_arrow IDS Screens for Network Attack Protection Overview and Configuration
play_arrow Traffic Load Balancing
- play_arrow Traffic Load Balancing Overview and Configuration
  - Traffic Load Balancer Overview
  - Configuring TLB
play_arrow DNS Request Filtering
- play_arrow DNS Request Filtering Overview and Configuration
  - DNS Request Filtering for Disallowed Website Domains
  - DNS Request Filtering System Logging Error Messages
play_arrow URL Filtering
- play_arrow URL Filtering
  - URL Filtering Overview
  - Configuring URL Filtering
play_arrow Integration of Juniper ATP Cloud and Web filtering on MX Routers
- play_arrow Integration of Juniper ATP Cloud and Web filtering on MX Routers
  - Integration of Juniper ATP Cloud and Web Filtering on MX Series Routers
play_arrow Aggregated Multiservices Interfaces
- play_arrow Enabling Load Balancing and High Availability Using Multiservices Interfaces
play_arrow Inter-Chassis Services PIC High Availability
- play_arrow Inter-Chassis Services PIC High Availability Overview and Configuration
play_arrow Application Layer Gateways
- play_arrow Enabling Traffic to Pass Securely Using Application Layer Gateways
play_arrow NAT, Stateful Firewall, and IDS Flows
- play_arrow Inline NAT Services Overview and Configuration
play_arrow Configuration Statements

list Table of Contents

English

Configuring Next Gen Services DS-Lite Softwires

date_range 06-Dec-23

arrow_backward

arrow_forward

Configuring Next Gen Services Softwire Rules

You configure softwire rules to instruct the router how to direct traffic to the addresses specified for 6rd, DS-Lite, or MAP-E softwire concentrators. Softwire rules do not perform any filtration of the traffic. They do not include a from statement, and the only option in the then statement is to specify the address of the softwire concentrator.

Starting in Junos OS release 19.3R2 6rd softwires are supported. Starting in Junos OS release 20.2, DS-Lite and Mapping of Address and Port with Encapsulation (MAP-E).

You can create a softwire rule consisting of one or more terms and associate a particular 6rd, DS-Lite, or MAP-E softwire concentrator with each term. You can include the softwire rule in service sets along with other services rules.

To configure a softwire rule set:

Assign a name to the rule set.

content_copy zoom_out_map
[edit services softwires]
user@host# edit rule-set rule-set-name

For example:

content_copy zoom_out_map
[edit services softwires]
user@host# edit rule-set swrs1

Configure the input and output match directions for the rule set.
```
[edit services softwires rule-set swrs1]
user@host# set match-direction input 
```

Specify the name of the rule to apply if the match in this direction is met.

content_copy zoom_out_map
[edit services softwires rule-set swrs1]
user@host# edit rule rule-name

For example:

content_copy zoom_out_map
[edit services softwires rule-set swrs1]
user@host# edit rule swr1

Associate a 6rd, DS-Lite or MAP-E softwire concentrator with this term.
```
[edit services softwires rule-set swrs1 rule swr1]
user@host# set then ds-lite | map- | v6rd
```
For example, to associate a DS-Lite softwire specify the name of the DS-Lite softwire.
```
[edit services softwires rule-set swrs1 rule swr1]
user@host# set then ds-lite dslsw1
```
Repeat steps 2 and 3, and 4for the output direction.

Configuring Service Sets for Next Gen Services Softwires

You must include previously defined NAT or stateful firewall softwire rules or a softwire rule set in a service set to enable softwire processing.

Starting in Junos OS release 20.2R1, DS-Lite, MAP-E and 6rd softwires are supported in MX240, MX480, and MX960 routers. MAP-E and 6rd softwires are supported inline on an MPC by specifying the si-1/0/0 interface naming convention. DS-Lite is softwires run on the MX-SPC3 security services card.

To configure service sets for softwires:

Specify a name for the service set.

content_copy zoom_out_map
[edit services] 
user@host# edit service-set service-set-name 

For example:

content_copy zoom_out_map
[edit services]
user@host# edit service-set vms-sw-ss 

Specify the IPv6 prefix length for the subscriber addresses.
```
[edit services service-set vms-sw-ss]
user@host# set softwire-options dslite-ipv6-prefix-length dslite-ipv6-prefix-length
```
We support four prefix lengths: 56, 64,96 and 128, which is the default.
For NAT, you can include a NAT rule for flows originated by DS-Lite softwires.
Note:

Currently a NAT rule configuration is required with a DS-Lite softwire configuration when you use interface service set configurations; NAT is not required when using next-hop service set configurations. NAT processing from IPv4 to IPv6 address pools and vice versa is not currently supported. FTP, HTTP, and RSTP are supported.

Note:
With a DS-Lite softwire, if you configure stateful firewall rules without configuring NAT rules, using an interface service set causes the ICMP echo reply messages to not be sent correctly to DS-Lite. This behavior occurs if you apply a service set to both inet and inet6 families. In such a scenario, the traffic that is not destined to the DS-Lite softwire concentrator is also processed by the service set and the packets might be dropped, although the service set must not process such packets.

To prevent the problem to incorrect processing of traffic applicable for DS-Lite, you must configure a next-hop style service set and not an interface style service set. This problem does not occur when you configure NAT rules with interface service sets for DS-Lite.
Specify the name of the NAT rule set.
```
[edit services service-set vms-sw-ss]
user@host# edit nat-rule-sets nat-rule-set-name 
```

Specify the service interface to be used.

content_copy zoom_out_map
[edit services service-set vms-sw-ss]
user@host# set interface-service service-interface vms-interface-name 

Specify the name of the previously defined softwires rule set that you want to apply to this service set.
```
[edit services service-set vms-sw-ss]
user@host# set softwires-rule-set  rule-set-name 
```

Configuring the DS-Lite Softwire

Starting in Junos OS release 20.2R1, you can configure DS-Lite softwires for Next Gen Services on the MX-SPC3 services card.

Specify a name for the DS-Lite softwire.

content_copy zoom_out_map
[edit]
user@host# edit services softwires softwire-types ds-lite name

Specify a name for the DS-Lite softwire.

content_copy zoom_out_map
[edit}
user@host# edit services softwires softwire-types ds-lite name 

For example:

content_copy zoom_out_map
user@host# edit services softwires softwire-types ds-lite dslsw1

Specify the IPv6 address of the softwire concentrator.
Note:
For CGNAT Next Gen Services on the MX-SPC3 security services card, when you configure DS-Lite concentrator, use the following rules:

For non-prefix based DS-Lite subscribers, specify the B4 IPv6 address

For prefix-based DS-Lite subscribers, specify the IPv6 prefix address
For example:
```
[edit services softwires softwire-types ds-lite dslsw1]
user@host# set softwire-concentrator B4-IPv6-address or IPv6-prefix-address
```
You can specify the maximum transmission unit (MTU) for the softwire tunnel automatically or manually.
1. To manually specify the MTUs for the softwire tunnel:
  [edit services softwires softwire-types ds-lite dslsw1] user@host# set mtu-v4 bytes user@host# set mtu-v6 bytes
  Note:
  This MTU-v6 option sets the maximum transmission unit when encapsulating IPv4 packets into IPv6. If the final length is greater than the MTU-v4 value, the IPv6 packet is fragmented. This option is mandatory because it depends on other network parameters under administrator control.

Specify the maximum number of flows for the softwire.

content_copy zoom_out_map
[edit services softwires softwire-types ds-lite dslsw1] 
user@host# set flow-limit 1000

(Optional) For prefix-based DS-Lite subscriber softwires, configure the maximum number of subscriber sessions allowed per prefix. You can configure from 0 through 16,384 sessions.
```
[edit services softwires softwire-types ds-lite dslsw1] 
user@host# set session-limit-per-prefix 12
```
Note:
You cannot use flow-limit and session-limit-per-prefix in the same DS-Lite configuration.
Configure the size of the IPv4 subnet prefix to which limiting is applied. ipv4prefix=6rd customer edge ipv4
```
[edit services softwires softwire-types ds-lite dslsw1] 
user@host# set ipv4-prefix
```
Configure the size of the IPv6 subnet prefix to which limiting is applied. Specify a prefix length of 56, 64, 96, or 128.
```
[edit services softwires softwire-types ds-lite dslsw1] 
user@host# set v6rd-prefix
```
Note:
Ensure that all mappings are cleared before changing the prefix length.

Change History Table

Feature support is determined by the platform and release you are using. Use Feature Explorer to determine if a feature is supported on your platform.

Release

Description

20.2R1

Starting in Junos OS release 20.2R1, you can configure DS-Lite softwires for Next Gen Services on the MX-SPC3 services card.

20.2R1

Starting in Junos OS release 20.2, DS-Lite and Mapping of Address and Port with Encapsulation (MAP-E).

20.2R1

Starting in Junos OS release 20.2R1, DS-Lite, MAP-E and 6rd softwires are supported in MX240, MX480, and MX960 routers.

19.3R2

Starting in Junos OS release 19.3R2 6rd softwires are supported.

arrow_backward PREVIOUS DS-Lite Softwires—IPv4 over IPv6 for Next Gen Services

NEXT arrow_forward DS-Lite Subnet Limitation

Next Gen Services Interfaces User Guide for Routing Devices

ON THIS PAGE

Configuring Next Gen Services DS-Lite Softwires

Configuring Next Gen Services Softwire Rules

Configuring Service Sets for Next Gen Services Softwires

Configuring the DS-Lite Softwire

Change History Table

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Next Gen Services Interfaces User Guide for Routing Devices

ON THIS PAGE

Configuring Next Gen Services DS-Lite Softwires

Configuring Next Gen Services Softwire Rules

See Also

Configuring Service Sets for Next Gen Services Softwires

Configuring the DS-Lite Softwire

Change History Table

Stay in touch