Configuring Virtual Routers; Configuring Ipsec; Configuring Physical Layer Interfaces - Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual

JUNOSe 11.1.x System Basics Configuration Guide

Configuring Virtual Routers

Multiple distinct virtual routers are supported within a single router, which allows
service providers to configure multiple, separate, secure routers within a single
chassis. These routers are identified as virtual routers (VRs). Applications for this
function include the creation of individual routers dedicated to wholesale customers,
corporate virtual private network (VPN) users, or a specific traffic type.
The router implements the virtual routers by maintaining a separate instance of each
data structure for each virtual router and allowing each protocol to be enabled on a
case-by-case basis. Virtual routers provide full support for all supported routing
protocols (unicast, multicast, and MPLS).
For information about configuring virtual routers, see "Configuring Virtual Routers"
on page 539.

Configuring IPSec

IPSec provides security to IP flows through the use of authentication and encryption.
IPSec comprises two encapsulating protocols:
For information about configuring IPSec, see JUNOSe IP Services Configuration Guide.

Configuring Physical Layer Interfaces

The router supports a number of line rates; some of these are listed per line module
below.
10
Configuring Virtual Routers
Authentication verifies that data is not altered during transmission and ensures
that users are communicating with the individual or organization that they believe
they are communicating with.
Encryption makes data confidential by making it unreadable to everyone except
the sender and intended recipient.
Encapsulating Security Payload (ESP) provides confidentiality and authentication
functions to every data packet.
Authentication header (AH) provides authentication to every data packet.
COCX-F3 line module supports unchannelized E3.
Channelized OCx/STMx (cOCx/STMx) line module supports DS3 channelized to
DS1, fractional DS1, or the DS0 level; unchannelized DS3; E1/T1 channelized to
fractional DS1; unframed E1.
CT3 12-F0 line modules support DS3 channelized to DS1, fractional DS1, or the
DS0 level. CT3 12-F0 line modules also support unchannelized T3.
IPSec Service module provides tunnel service for secure tunnels.
GE/FE line module supports Gigabit Ethernet and Fast Ethernet.