[j-nsp] L3-VPN(virtual-router) + IPSec(IPv6)

J jkei at zak.att.ne.jp
Thu Apr 17 12:05:27 EDT 2003


Anyone know how we can configure IPSec(IPv6) with virtual-router under 
ES PIC in 5.7? 

It works okay with IPv4 but I don't see any "ipsec-sa" command under 
family inet6. Any pointer would be appreciated.  

es-0/2/0 {
    unit 0 {
        tunnel {
            source 61.120.159.2;
            destination 192.217.60.2;
        }
        family inet {
            ipsec-sa "cpecry";
            address 172.31.1.1/30;
        }
        family inet6 {
            ;****** no "ipsec-sa" command found here *****
            address 2001:1111:1000::1/64;
        }
    }
}

routing-instances {
    vpn-a {
        instance-type virtual-router;
        interface es-0/2/0.0;
        routing-options {
            static {
                route 10.0.0.0/24 next-hop 172.31.100.2;
            }
        }
        protocols {
            ospf {
                export static-or-connected;
                area 0.0.0.0 {
                    interface es-0/2/0.0;
                }
            }
        }
    }
}


More information about the juniper-nsp mailing list