1. Getting Started

1.1. About This Guide

This guide describes details pertaining to Integrated Services Adapters (ISAs) and Extended Services Appliances (ESAs) and the services they provide.

This guide is organized into functional chapters and provides concepts and descriptions of the implementation flow, as well as Command Line Interface (CLI) syntax and command usage.

The topics and commands described in this document apply to the:

  1. 7450 ESS
  2. 7750 SR
  3. VSR

Table 1 lists the available chassis types for each SR OS router and the supported service hardware (ISA or ESA).

Table 1:  Supported SR OS Router Chassis Types and Service Hardware  

Service Hardware Support

7450 ESS

7750 SR

ISAs

7450 ESS-7/12

  1. 7750 SR-1e/2e/3e
  2. 7750 SR-7/12
  3. 7750 SR-12e

ESAs

-

  1. 7750 SR-7/12
  2. 7750 SR-12e
  3. 7750 SR-2s
  4. 7750 SR-1
  5. 7750 SR-1s
  6. 7750 SR-7s
  7. 7750 SR-14s

For a list of unsupported features by platform and chassis, and for services supported by ISAs and ESAs, refer to the SR OS 20.x.Rx Software Release Notes, part number 3HE 16194 000x TQZZA.

Command outputs shown in this guide are examples only; actual displays may differ depending on supported functionality and user configuration.

Note:

This guide generically covers Release 20.x.Rx content and may contain some content that will be released in later maintenance loads. Refer to the SR OS 20.x.Rx Software Release Notes, part number 3HE 16194 000x TQZZA for information about features supported in each load of the Release 20.x.Rx software.

1.2. ISA and ESA Configuration Process

The ESA is specialized hardware that hosts ESA Virtual Machines (ESA-VMs). Each ESA-VM is configured as an integrated service type. ESA extends the proven Integrated Services Adapter (ISA) system implementation architecture and related control processing module (CPM) functions on the 7750 SR systems to include ESA-VM-based virtual ISA (v-ISA) functionality.

Table 2 lists the ISA and ESA configurations with descriptions and their supported functionalities.

Table 2:  ISA and ESA Configurations and Supported Features  

Configuration

Description

Supported Features

mda type: isa-aa, isa2-aa

esa vm-type: aa

Application Assurance

  1. Per-flow stateful deep packet inspection on OSI Layers 3 to 7
  2. Release-independent protocol signatures, applications, application groups, and charging groups
  3. Flow attribute classification using deterministic and heuristic machine-learning algorithms
  4. Per-application and per-attribute policy enforcement and charging
  5. Layer 7 stateful firewall to block unsolicited traffic, with full application-level gateway (ALG)
  6. URL filtering and web classification based filtering
  7. Access network congestion detection and control using Dynamic Experience Management
  8. Application and protocol based volume and performance reporting

mda type: isa-bb, isa2-bb

esa vm-type: bb

Broadband

  1. CGN: LSN44, DS-Lite and NAT64
  2. L2-Aware NAT for tight integration between BNG subscribers and NAT44
  3. LNS
  4. WLAN-GW
  5. vRGW
  6. Generic re-assembly and TCP MSS-adjust

mda type: isa-tunnel, isa2-tunnel

esa vm-type: tunnel

IP tunnels

  1. IPsec tunnel: Secure network traffic on IP level for site-to-site, remote-access, mobile backhaul
  2. GRE/IP-in-IP tunnel: Overlay IP interface with transport as GRE/IP-in-IP tunnel
  3. L2TPv3 tunnel: Pseudowire for VPLS and Routed VPLS

mda type: isa-video, isa2-video

Video

  1. Fast Channel Change (FCC)
  2. Video Packet Retransmission (RET)
  3. Video Quality Monitoring (VQM)
  4. Perfect Stream
  5. Multicast (S,G) NAT

Table 3 is a summary of the ISA and ESA virtual machines (ESA-VMs) guide structure by task. Specific configuration details for a software area, CLI syntax and command usage to configure parameters for each function are contained within each section.

Table 3:   Configuration details 

Area

Task

Section

Application Assurance

Configure Application Assurance entities

Configuring Application Assurance with CLI

IP tunnels

Determine IPsec deployment requirements

IPsec Deployment Requirements

Configure IPsec

Configuring IPsec with CLI

L2TPV3 tunnels

Configure the L2TPV3 control plane

Control Plane

Configure public SAP

Public SAP

Configure private SAP

Private SAP

Video services

Configure video services components

Configuring Video Service Components with CLI

Configure REF/FCC video components

Configuring RET/FCC Video Components with CLI

Configure ADI components

Configuring ADI Components with CLI

Network Address Translation

Configure NAT on SR

Configuring NAT

Configure NAT on VSR

Configuring VSR-NAT

TCP MSS adjustment

Configure TCP MSS adjustments for BB

TCP MSS Adjustment

Configure TCP MSS adjustments for tunnel-ISA

TCP MSS Adjustment