Routing

Hello Friends,

Can anyone provide me an example of configuration for GRE tunnel on MX Series with Trio MPC/MIC? (without MS-DPC)

I read through this document http://www.juniper.net/techpubs/en_US/junos11.1/topics/usage-guidelines/services-configuring-tunnel-interfaces-on-mx-series-routers.html

Does this feature disable physical port on MIC?

Thanks in advance.

Regards,

Toyos

Hi,

On Trio MPCs the tunnel-service does not disable the MIC port, it only somehow reserve bandwidth on PFE:

}

[edit chassis]fpc slot-number {pic number {tunnel-services {bandwidth (1g | 10g);}}

}

 gr-x/y/z {
        unit 0 {
            tunnel {
                source 10.1.1.1;
                destination 10.1.1.2;
            }
            family inet {
                address 100.1.1.1/32;
            }
        }
    }

}

Does IPsec work with Trio based GRE tunnels?

From my understanding, the MS-DPC is required for IPSec.  GRE and IP-IP tunneling services are supported natively on the trio-chipset MPCs.

Yep.  No crypto on the Trio natively.  Crypto requires a MS-DPC or the services MIC that will exist some day.

-Chad