Juniper ACX2000

• Understanding Service Sets on page 1028
• Service Filters in ACX Series on page 1035
• Network Address Translation Address Overload in ACX Series on page 1001
• Network Address Translation Rules Overview on page 1004
• Configuring Service Sets for Network Address Translation on page 1030
• Configuring Queuing and Scheduling on Inline Services Interface on page 1040
Service Filters in ACX Series
When you apply a service set to the traffic at an inline services interface, you can optionally
use service filters to refine the target of the set of services and also to process traffic.
Service filters enable you to manipulate traffic by performing packet filtering to a defined
set of services on an inline services interface before the traffic is delivered to its destination.
In ACX Series routers, you can apply a service filter to traffic before packets are accepted
for input service processing.
NOTE: In ACX Series routers, the service-set filters are implemented using
ternary content addressable memory (TCAM) space. The allocated TCAM
space is shared by the bridge family filter. The same space is shared by the
NNI-Address-Overload-Reverse filter (for each service set that is configured
with address overloading, the internal filters are configured for the given
overloaded IP address and the port range to redirect the matched reverse-nat
(public to private) traffic to the service). From a scaling perspective, the
allocated 124 hardware TCAM entries are shared by these features and the
allocation of TCAM entries works on a first-come-first-serve basis mode.
Related
Documentation
Network Address Translation Overview on page 999•
• Network Address Port Translation Overview on page 1001
• Enabling Inline Services Interface on ACX Series on page 1008
• Understanding Service Sets on page 1028
• Guidelines for Applying Service Filters on page 1036
• Service Filter Match Conditions for IPv4 Traffic on page 1038
• Service Filter Actions on page 1039
• Network Address Translation Address Overload in ACX Series on page 1001
• CoS for NAT Services on ACX Series Universal Access Routers on page 887
• Network Address Translation Constraints on ACX on page 1003
• Configuring Address Pools for Network Address Port Translation (NAPT) Overview on
page 1007
1035Copyright © 2017, Juniper Networks, Inc.
Chapter 31: Configuring Network Address Translation (NAT) and Stateful Firewall Services