Juniper NFX250 - Example: Configuring IKE, IPSec, and Security Zones

user@jcp# show interfaces ge-0/0/2
unit 0 {
family ethernet-switching {
vlan {
members vlan1;
}
}
}
[edit]
user@jcp# show interfaces xe-0/0/12
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members vlan2;
}
}
}
[edit]
user@jcp# show interfaces sxe-0/0/0
unit 0 {
family ethernet-switching {
interface-mode trunk;
vlan {
members [vlan1 vlan2];
}
}
}
[edit]
user@jcp# show vlans
vlan2 {
vlan-id 1177;
}
vlan1 {
vlan-id 77;
}
Configuring the VNF Interfaces and Creating the Service Chain
Step-by-Step
Procedure
Once you have completed the configuration on JCP, you need to:
1. Configure the host-os instance with either with LAN, WAN, or glue-vlan to be used
for service chaining
user@jdm# set host-os vlans vlan1 vlan-id 77
user@jdm# set host-os vlans vlan2 vlan-id 1177
user@jdm# set host-os vlans glue-vlan vlan-id 123
2. Bring up the VM1 with one virtio interface mapped to VLAN, and another interface
mapped to glue-vlan.
159Copyright © 2017, Juniper Networks, Inc.
Chapter 7: Service Chaining