[j-nsp] PFE-forwarded IPv6

Truman Boyes truman at suspicious.org
Tue Dec 22 23:12:34 EST 2009


Hi Jonathan,

You can use any of your DPCs. On non-MX JUNOS routers you need to have tunnel pics (ie. packet that needs to be encapsulated/tunneled/etc will switch from PFE to PIC to PFE). MX does not require this because you can make the DPC perform tunnel-services. 

Once you create the tunnel-services function on the DPC, you can associate the IPIP tunnel interface with the tunnel service. Ie. Change the IPIP.0 to: ip-3/0/0.0, which corresponds to your FPC 3 PIC 0, port 0 unit 0. 

Take a look at: 

http://www.juniper.net/techpubs/software/junos/junos83/swconfig83-services/download/tunnel-config.pdf

Search for MX960. 

Hope this helps. Your tunnel should work once you create this association. 

Kind regards,
Truman




On 23/12/2009, at 2:49 PM, Jonathan Lassoff wrote:

> Excerpts from Truman Boyes's message of Tue Dec 22 18:25:23 -0800 2009:
>> Have you enabled the tunnel-services statement at the [ edit chassis fpc
>> slot-number pic pic-number] stanza?
> 
> Thanks Truman!
> 
> Nope. I've yet to find reference to this in the documentation relating
> to setting up tunnels. Do you have any recommendations for where I find
> out more about what this is doing architectually? 
> 
> On which slot and pic number do you think I should choose? I read that
> the MX's DPCs have built-in tunnel-services PICs along with a number of
> fixed interface PICs.
> 
> I assumed I should choose the DPC and PIC number for the upstream
> interface that goes towards the tunnel's outer IP destination:
> 
> jof at mx1.sfo2-re0> show configuration chassis fpc 3  
> pic 0 {
>    tunnel-services {
>        bandwidth 1g;
>    }
> }
> 
> However, I'm still seeing the same ICMPv6 responses, and traffic is not
> passing.
> 
> Thanks,
> Jonathan
> 



More information about the juniper-nsp mailing list