Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Group VPN on AMS interfaces

date_range 23-Dec-20

Starting with Junos OS Release 18.4R1, Junos OS supports load balancing Group VPN services on Aggregated multiservices interface (AMS) interfaces. AMS is a bundle of multiple service interfaces combined together that functions as a single interface. Group VPN configured on AMS leverages the load balancing option in AMS to distribute traffic over the member interfaces that comprise the AMS interface. The Group VPN load balanced traffic follows the behavior defined by the hash key in the service set of the AMS interface.

Group VPN on AMS interface has the following limitation:

  • Group VPN on AMS only supports load balancing.

  • High Available is not supported on the AMS interface on Group VPNs.

  • AMS is only supported on MX Series routers with more than one service PIC.

The following output shows a sample service set configuration on an AMS interface.

content_copy zoom_out_map
user@router1# show services service-set ss-gvpn400
interface-service {
    service-interface ams1.1;
    load-balancing-options {
        hash-keys {
            ingress-key [ source-ip protocol destination-ip ];
            egress-key [ destination-ip protocol source-ip ];
        }
    }
}
ipsec-group-vpn gvpn400;

For more information on configuring AMS, see Configuring Aggregated Multiservices Interfaces.

footer-navigation