Configuring Service Sets to Be Applied to Services Interfaces
You can configure an inline-services interface on which a service is to be performed.
Services interfaces are used with either of the service set types described in the following
sections.
•
Configuring Services Interface on page 1092
•
Configuring Next-Hop Service Sets on page 1093
•
Determining Traffic Direction on page 1093
Configuring Services Interface
An interface service set is used as an action modifier across an entire interface. To
configure the services interface, include the interface-service statement at the
[edit services service-set service-set-name] hierarchy level:
[edit services service-set service-set-name]
interface-service {
service-interface interface-name;
}
Only the interface name is needed, because Junos OS manages logical unit numbers
automatically. The services interface must be an inline-services interface for which you
have configured unit 0 family inet at the [edit interfaces interface-name] hierarchy level.
When you have defined and grouped the service rules by configuring the service-set
definition, you can apply services to one or more interfaces installed on the router. When
you apply the service set to an interface, it automatically ensures that packets are directed
to the Network Address Translation (NAT) engine.
To associate a defined service set with an interface, include the service-set statement
with the input and output statement at the [edit interfaces interface-name unit
logical-unit-number family inet service] hierarchy level:
[edit interfaces interface-name unit logical-unit-number family inet service]
input {
service-set service-set-name <service-filter filter-name>;
}
output {
service-set service-set-name <service-filter filter-name>;
}
You configure the same service set on the input and output sides of the interface. You
can optionally include filters associated with each service set to refine the target and
additionally process the traffic. If you include the service-set statement without a
service-filter definition, Junos OS assumes that the match condition is true and selects
the service set for processing automatically.
NOTE: If you configure service sets with filters, you must configure the service
sets on the input and output sides of the interface.
Copyright © 2017, Juniper Networks, Inc.1092
ACX Series Universal Access Router Configuration Guide