ISA and ESA configuration process

The ESA is specialized hardware that hosts ESA Virtual Machines (ESA-VMs). Each ESA-VM is configured as an integrated service type. ESA extends the proven Integrated Services Adapter (ISA) system implementation architecture and related control processing module (CPM) functions on the 7750 SR systems to include ESA-VM-based virtual ISA (v-ISA) functionality.

Table: ISA and ESA configurations and supported features lists the ISA and ESA configurations with descriptions and their supported functionalities.

Table: ISA and ESA configurations and supported features
Configuration	Description	Supported features
mda type: isa2-aa esa vm-type: aa	Application Assurance	Per-flow stateful deep packet inspection on OSI Layers 3 to 7 Release-independent protocol signatures, applications, application groups, and charging groups Flow attribute classification using deterministic and heuristic machine-learning algorithms Per-application and per-attribute policy enforcement and charging Layer 7 stateful firewall to block unsolicited traffic, with full application-level gateway (ALG) URL filtering and web classification based filtering Access network congestion detection and control using Dynamic Experience Management Application and protocol based volume and performance reporting
mda type: isa2-bb esa vm-type: bb	Broadband	CGN: LSN44, DS-Lite and NAT64 L2-Aware NAT for tight integration between BNG subscribers and NAT44 LNS WLAN-GW vRGW Generic re-assembly and TCP MSS-adjust
mda type: isa2-tunnel esa vm-type: tunnel	IP tunnels	IPsec tunnel: Secure network traffic on IP level for site-to-site, remote-access, mobile backhaul GRE/IP-in-IP tunnel: Overlay IP interface with transport as GRE/IP-in-IP tunnel L2TPv3 tunnel: Pseudowire for VPLS and Routed VPLS
mda type: isa2-video	Video	Fast Channel Change (FCC) Video Packet Retransmission (RET) Video Quality Monitoring (VQM) Perfect Stream Multicast (S,G) NAT

Table: Configuration details is a summary of the ISA and ESA virtual machines (ESA-VMs) guide structure by task. Specific configuration details for a software area, CLI syntax and command usage to configure parameters for each function are contained within each section.

Table: Configuration details
Area	Task	Section
Application Assurance	Configure Application Assurance entities	Configuring AA with CLI
IP tunnels	Determine IPsec deployment requirements	IPsec deployment requirements
IP tunnels	Configure IPsec	Configuring IPsec with CLI
L2TPV3 tunnels	Configure the L2TPV3 control plane	Control plane
	Configure public SAP	Public SAP
	Configure private SAP	Private SAP
Video services	Configure video services components	Configuring video service components with CLI
Video services	Configure REF/FCC video components	Configuring RET/FCC video components with CLI
Network Address Translation	Configure NAT on SR	Configuring NAT
Network Address Translation	Configure NAT on VSR	Configuring VSR-NAT
TCP MSS adjustment	Configure TCP MSS adjustments for BB	TCP MSS adjustment
	Configure TCP MSS adjustments for tunnel-ISA	TCP MSS adjustment
	Configure AA TCP MSS adjustments	AQP