Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Supported Platforms

 

Related Documentation

 

Understanding Service Sets

Junos OS for ACX Series routers enables you to create service sets that define a collection of services to be performed by an inline services interface. You can configure the service set either as an interface-style service set or as a next-hop-style service set.

An interface-style service set is used as an action modifier across an entire interface. You can use an interface-style service set when you want to apply services to packets passing through an interface.

A next-hop-style service set is a route-based method of applying a particular service. Only packets destined for a specific next hop are serviced by the creation of explicit static routes. This configuration is useful when services need to be applied to an entire virtual routing and forwarding (VRF) table, or when routing decisions determine that services need to be performed. When a next-hop-style service is configured, the services interface is considered to be a two-legged module with one leg configured to be the inside interface (inside the network) and the other configured as the outside interface (outside the network).

To configure service sets for NAT services, include the service-set statement at the [edit services] hierarchy level:

[edit services]
service-set service-set-name {
nat-rule-sets rule-set-name;
nat-rules rule-names;
stateful-firewall-rule-setsrule-set-name;
stateful-firewall-rules rule-names;
inside-service-interface interface-name.unit-number;
outside-service-interface interface-name.unit-number;
}
}

To configure service sets for IPsec VPN services, include the service-set statement at the [edit services] hierarchy level:

[edit services]
service-set service-set-name {
inside-service-interface interface-name.unit-number;
outside-service-interface interface-name.unit-number;
}
local-gateway (address | interface);
no-anti-replay;
}
ipsec-vpn-rules rule-name;
}
 

Related Documentation

 

Modified: 2017-08-31

Supported Platforms

 

Related Documentation

 

Modified: 2017-08-31