Juniper JUNOSE 11.0.X IP SERVICES Configuration Manual page 16

JUNOSe 11.0.x IP Services Configuration Guide
Chapter 11
Chapter 12
xvi
Table of Contents
Combining Dynamic and Static IP Tunnels in the Same Chassis ...........263
Changing and Removing Existing Dynamic IP Tunnels .........................263
Platform Considerations ..............................................................................263
Module Requirements ...........................................................................264
ERX7xx Models, ERX14xx Models, and the ERX310 Router ...........264
E120 Router and E320 Router ........................................................264
Redundancy and Tunnel Distribution ....................................................265
References ..................................................................................................265
Configuring a Destination Profile for Dynamic IP Tunnels ...........................265
Modifying the Default Destination Profile .............................................265
Modifying the Configuration of the Default Destination Profile .......265
Configuring a Destination Profile for GRE Tunnels ................................266
Creating a Destination Profile for DVMRP Tunnels ................................267
Monitoring Dynamic IP Tunnels ..................................................................270
IP Reassembly for Tunnels
Overview .....................................................................................................279
Platform Considerations ..............................................................................280
Module Requirements ...........................................................................280
ERX7xx Models, ERX14xx Models, and the ERX310 Router ...........280
E120 Router and E320 Router ........................................................281
Configuring IP Reassembly ..........................................................................281
Monitoring IP Reassembly ...........................................................................282
Setting Statistics Baselines ....................................................................282
Displaying Statistics ..............................................................................283
Securing L2TP and IP Tunnels with IPSec
Overview .....................................................................................................287
Tunnel Creation ....................................................................................287
IPSec Secured-Tunnel Maximums .........................................................288
Platform Considerations ..............................................................................288
Module Requirements ...........................................................................288
References ..................................................................................................288
L2TP/IPSec Tunnels .....................................................................................289
Setting Up the Secure L2TP Connection ................................................290
L2TP with IPSec Control and Data Frames ............................................291
Compatibility and Requirements ..........................................................291
Client Software Supported ..............................................................291
Interactions with NAT .....................................................................291
Interaction Between IPSec and PPP ................................................292
LNS Change of Port ........................................................................292
Group Preshared Key .....................................................................292
NAT Passthrough Mode .........................................................................292
NAT Traversal .......................................................................................293
How NAT-T Works ..........................................................................293
UDP Encapsulation .........................................................................293
UDP Statistics .................................................................................294
NAT Keepalive Messages ................................................................295
279
287