Nortel Networks 8000 - Manual (Page 104)

Nortel Secure Router 8000 Series
Configuration -WAN Access 5 Logical interface configuration
5.1.2 Virtual template and virtual access interface
Relations between the virtual template and the virtual access interface
You use the virtual template to configure a virtual access interface. The virtual template is an
interface template. Create a virtual template before creating a virtual access interface and
delete it after turning o^ the virtual access interface.
The system creates the virtual access interface when required. This interface operates using
parameters of the virtual template. The disconnection of the underlying links caused by the
intervention of the user can turn o^ this interface. When enabling the PPP debugging, you can
view the status change between Up and Down of the virtual access interface. For the PPP
debugging commands, refer to the Nortel Secure Router 8000 Series Command Reference.
Application of the virtual template and the virtual access interface
Virtual template and virtual access interface are mainly applied in VPN, MP and PPPoX
(PPPoE, PPPoA and PPPoEoA).
After setting up the connection of VPN session, create a virtual access interface to exchange
data with the opposite end. The system then chooses a virtual template according to the user’s
configuration, and dynamically creates a virtual access interface based on the configuration
parameters of the template.
For the VPN configuration, refer to the Nortel Secure Router 8000 Series Configuration
Guide -.
After multiple PPP links are bound as MP, create a virtual access interface to exchange data
with the opposite end. This virtual access interface deletes after the link is disconnects.
When the interface uses PPPoX , create a virtual access interface for a sub-interface or PVC
to exchange data with the opposite end. This virtual access interface is deletes after the link
disconnectes.
5.1.3 Virtual ethernet interface
The Virtual Ethernet (VE) interface is a virtual interface on the interface card. It has the
characteristics of an ethernet. Compared with an ordinary Ethernet interface, VE does not
support the sub-interface.
You apply the VE in point to point protocol over ethernet over AAL5 (PPPoEoA) and IP
Protocol over ethernet over AAL5 (IPoEoA).
Both PPPoEoA and IPoEoA have three-layer architecture:
IPoEoA has three-layer architecture:
• The upper layer is encapsulated with PPP and IP respectively.
• The middle layer is encapsulated with PPP over Ethernet (PPPoE) and IP over Ethernet
(IPoE).
• The lower layer is encapsulated PPPoE over AAL5 and IPoE over AAL5.
For the detailed configuration of PPPoEoA and IPoEoA, refer to ATM configuration."
You can also configure the virtual Ethernet interface of the SR8000 with policy-based routing,
firewall, and route.
Issue 5.3 (30 March 2009) Nortel Networks Inc. 5-3