User manual

Adaptive Services II FIPS PIC
■
JUNOS 7.2 and laterSoftware release
■
JUNOS-FIPS requires an Adaptive Services II FIPS PIC for external IPSec connections. See
the Secure Configuration Guide for Common Criteria and JUNOS-FIPS for more information.
■
Supports tunnel services. This feature is included with the PIC and does not require an
individual license.
■
Individual licenses must be purchased for additional services such as Network Address
Translation (NAT), stateful firewall, intrusion detection services (IDS), IPSec. J-Flow
accounting, and voice services. For information about which services are supported by
PIC and platform type, see the JUNOS Services Interfaces Configuration Guide.
■
Power requirement: 0.4 A @ 48 V (19 W)
Description
■
Support for up to 2000 service sets
■
Active monitoring on up to 1 million flows
■
Support for MTUs up to 9192 bytes for Gigabit Ethernet and SONET interfaces
Hardware features
For a list of the software features available for services PICs, see the JUNOS Services Interfaces
Configuration Guide.
Depending on your JUNOS release and individual licenses, software features for this PIC can
include:
■
Stateful firewall with packet inspection:
■
Detects SYN attacks, ICMP and UDP floods, and ping-of-death attacks
■
NAT for IP addresses
■
Port Address Translation (PAT) for port numbers
■
J-Flow accounting exports cflowd version 5 and version 8 records
■
Tunnel services:
■
IP-IP unicast tunneling
■
GRE unicast tunneling—Supports GRE fragmentation
■
PIM sparse mode unicast tunneling
■
Virtual tunnel interface for Layer 3 VPNs
■
IPSec encryption
■
Voice services:
■
Compressed Real-Time Protocol (CRTP)
■
Encapsulations:
■
Multilink Frame Relay (MLFR)
■
Multilink Point-to-Point Protocol (MLPP)
Software features
Adaptive Services II FIPS PIC ■ 7
Adaptive Services II FIPS PIC