List Of Figures - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual

List of Figures
Part 1
Chapter 1
Chapter 2
Chapter 5
Chapter 7
Chapter 9
Chapter 11
Chapter 12
Copyright © 2010, Juniper Networks, Inc.
Chapters
Configuring Routing Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Figure 1: Applying Route Maps to Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Figure 2: Filtering with Access Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Figure 3: Filtering with AS-Path Access Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Figure 4: Route Map Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Figure 5: Community Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Configuring NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Figure 6: NAPT Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Figure 7: Bidirectional NAT Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Figure 8: Twice NAT Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Figure 9: Cross-VRF Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Figure 10: PPTP Tunnels on an Inside Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Figure 11: PPTP Tunnels on an Outside Network . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Configuring IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Figure 12: IPSec Tunneling Stack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Figure 13: IPSec Tunneling Packet Encapsulation . . . . . . . . . . . . . . . . . . . . . . . . . 124
Figure 14: IPSec Security Parameters in Relation to the Secure IP Interface . . . . 125
Figure 15: Customer A's Corporate Frame Relay Network . . . . . . . . . . . . . . . . . . . 153
Figure 16: ISP-X Uses ERX Routers to Connect Corporate Offices over the
Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
Figure 17: Connecting Customers Who Use Similar Address Schemes . . . . . . . . 156
Configuring ANCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185
Figure 18: Using ANCP with an Access Node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Configuring IP Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
Figure 19: IP Tunneling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
Figure 20: Transport and Tunnel Networks Using Different Routing Protocols . . 244
IP Reassembly for Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269
Figure 21: Tunneling Through an IP Network That Fragments Packets . . . . . . . . 270
Securing L2TP and IP Tunnels with IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Figure 22: L2TP with IPSec Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Figure 23: L2TP/IPSec Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278
Figure 24: L2TP Control Frame Encapsulated by IPSec . . . . . . . . . . . . . . . . . . . . 279
Figure 25: L2TP Data Frame Encapsulated by IPSec . . . . . . . . . . . . . . . . . . . . . . 279
Figure 26: L2TP Control Frame with NAT-T UDP Encapsulation . . . . . . . . . . . . . 281
Figure 27: L2TP Data Frame with NAT-T UDP Encapsulation . . . . . . . . . . . . . . . 282
xix