Group VPN on AMS interfaces
Starting with Junos OS Release 18.4R1, Junos OS supports load balancing Group VPN services on Aggregated multiservices interface (AMS) interfaces. AMS is a bundle of multiple service interfaces combined together that functions as a single interface. Group VPN configured on AMS leverages the load balancing option in AMS to distribute traffic over the member interfaces that comprise the AMS interface. The Group VPN load balanced traffic follows the behavior defined by the hash key in the service set of the AMS interface.
Group VPN on AMS interface has the following limitation:
Group VPN on AMS only supports load balancing.
High Available is not supported on the AMS interface on Group VPNs.
AMS is only supported on MX Series routers with more than one service PIC.
The following output shows a sample service set configuration on an AMS interface.
user@router1# show services service-set ss-gvpn400
interface-service {
service-interface ams1.1;
load-balancing-options {
hash-keys {
ingress-key [ source-ip protocol destination-ip ];
egress-key [ destination-ip protocol source-ip ];
}
}
}
ipsec-group-vpn gvpn400;
For more information on configuring AMS, see Configuring Aggregated Multiservices Interfaces.