Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] What Is an Unnumbered Tunnel Interface and When Should I Use It?

0

0

Article ID: KB4492 KB Last Updated: 27 Dec 2017Version: 4.0
Summary:
This article provides information about an Unnumbered & Numbered Tunnel Interface as well as explains when should they be used.
Solution:

A tunnel interface needs to be configured if you are creating a route-based VPN. When you create the tunnel interface, you have the option of using either a numbered or an unnumbered tunnel interface.

An unnumbered tunnel interface borrows the IP address of the interface that the tunnel interface is bound to. For example, if the Ethernet1 interface has an IP address of 10.1.1.1 and the tunnel.1 interface is bound to the Ethernet1 interface, the tunnel.1 interface will assume an interface IP address of 10.1.1.1.

A numbered tunnel interface uses an IP address space that is on a different subnet than any of the other configured interfaces on the NetScreen device.

‚ÄčNumbered tunnel interfaces should be used when doing any type of NAT in the VPN tunnel. This is especially useful when having overlapping IP subnets between two sides of a VPN tunnel.


 
Modification History:
2017-12-26: Article reviewed for accuracy. Minor changes done. Article is correct and complete.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search