• Configuring Service Sets for Network Address Translation on page 1030
• Configuring Service Sets to Be Applied to Services Interfaces on page 1031
• Configuring Queuing and Scheduling on Inline Services Interface on page 1040
Configuring Service Sets for Network Address Translation
When configuring a service set for Network Address Translation (NAT) processing, make
sure you have defined:
•
Service interfaces for handling inbound and outbound traffic
•
A NAT rule or rule set
NOTE: Prior to Junos OS Release 11.4R3, you could use a source NAT pool
only in a single service set. In Junos OS Release 11.4R3 and subsequent
releases, you can reuse a source or destination NAT pool in multiple service
sets, provided that the service interfaces associated with the service sets are
in different virtual routing and forwarding (VRF) instances.
•
For interface-style service sets, when a NAT pool is reused in multiple
service sets, the service interfaces used in the interface-service
service-interface option of each service set must be in different VRFs.
•
For next-hop-style service sets, when a NAT pool is reused in multiple
service sets, the service interfaces used in the outside-interface option of
each service set must be in different VRFs.
Not adhering to these service interface restrictions causes multiple routes
to be installed in the same VRF for the same NAT addresses, thereby causing
reverse traffic to be processed incorrectly.
To enable sharing of source NAT pools, include the
allow-overlapping-nat-pools statement at the [edit services nat] hierarchy
level.
To configure a NAT service set:
1. At the [edit services] hierarchy level, define the service set.
[edit services]
user@host# edit service-set service-set-name
2. Configure either an interface service, which requires a single service interface, or a
next-hop service, which requires an inside and outside service interface.
[edit services service-set service-set-name]
user@host# set interface-service service-interface interface-name
Or
Copyright © 2017, Juniper Networks, Inc.1030
ACX Series Universal Access Router Configuration Guide
To Next Page
Loading...
Need help?
General
