Advertising Bandwidth For Neighbors On A Broadcast Link Support; Group Vpn Interoperability With Cisco's Get Vpn - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

JUNOS OS 10.4 Release Notes
Related
Documentation

Advertising Bandwidth for Neighbors on a Broadcast Link Support

Group VPN Interoperability with Cisco's GET VPN

108
See the SRX3400 Services Gateway Hardware Guide or the SRX3600 Services Gateway
Hardware Guide for detailed information about the enhanced DC power supply and
additional requirements for NEBS and ETSI compliance.
Known Limitations in Junos OS Release 10.4 for SRX Series Services Gateways and J
Series Services Routers on page 133
Issues in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services
Routers on page 143
Errata and Changes in Documentation for Junos OS Release 10.4 for SRX Series Services
Gateways and J Series Services Routers on page 166
This feature is supported on all SRX Series and J Series devices.
You can now advertise bandwidth for neighbors on a broadcast link. The network link is
a point-to-multipoint (P2MP) link in the OSPFv3 link state database. This feature uses
existing OSPF neighbor discovery to provide automatic discovery without configuration.
It allows each node to advertise a different metric to every other node in the network to
accurately represent the cost of communication. To support this feature, a new
interface-type under the OSPFv3 interface configuration has been added to configure
the interface as p2mp-over-lan. OSPFv3 then uses LAN procedures for neighbor discovery
and flooding, but represents the interface as P2MP in the link state database.
The interface type and router LSA are available under the following hierarchies:
[
protocols ospf3 area area-id interface interface-name
[
routing-instances routing-instances-name protocols ospf3 area area-id interface
]
interface-name
[LN1000 Mobile Secure Router User Guide]
Cisco's implementation of GDOI is called Group Encryption Transport (GET) VPN. While
group VPN in Junos OS and Cisco's GET VPN are both based on RFC 3547, The Group
Domain of Interpretation, there are some implementation differences that you need to
be aware of when deploying GDOI in a networking environment that includes both Juniper
Networks security devices and Cisco routers. This topic discusses important items to
note when using Cisco routers with GET VPN and Juniper Networks security devices with
group VPN.
Group servers and group members on Juniper Networks security devices cannot
interoperate with Cisco GET VPN members. Group members on Juniper Networks security
devices can interoperate with Cisco GET VPN servers, with the following caveats:
The group VPN in Release 10.4 of Junos OS has been tested with Cisco GET VPN servers
running Version 12.4(22)T and Version 12.4(24)T.
]
Copyright © 2010, Juniper Networks, Inc.