Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Applying Services to Subscriber-Aware Traffic with a Service Set

date_range 13-Jan-21

Junos OS supports subscriber-aware services for the subscribers belonging to a particular TDF domain through the configuration of a subscriber-aware service set. The service set is assigned to the TDF domain’s TDF interface (mif).

Before you configure the service set, complete the following tasks:

  • Configure the service PIC for the service set.

  • Configure the TDF interface (mif).

  • Configure the PCEF profile at the [edit unified-edge pcef] hierarchy level.

  • Configure any NAT rules or rule sets that you want to apply.

To configure the subscriber-aware services for a TDF domain’s subscribers:

  1. Configure a PCEF profile at the [services] hierarchy level by specifying a name for the PCEF profile. This profile is a placeholder profile with no configuration options, but it must be created.
    content_copy zoom_out_map
    [edit services]
    user@host# set pcef profile pcef-profile-name 
    
  2. Configure an application identification profile by specifying a name for the profile. This profile is a placeholder profile with no configuration options, but it must be created.
    content_copy zoom_out_map
    [edit services application-identification]
    user@host# set profile app-id-profile-name 
    
  3. Configure an HTTP header enrichment profile by specifying a name for the profile. This profile is a placeholder profile with no configuration options, but it must be created.
    content_copy zoom_out_map
    [edit services hcm]
    user@host# set profile hcm-profile-name 
    
  4. Define a subscriber-aware service set.
    content_copy zoom_out_map
    [edit services]
    user@host# set service-set service-set-name service-set-options subscriber-awareness 
    
  5. Enable PCEF services for the service set. Use the profile name that you configured in Step 1.
    content_copy zoom_out_map
    [edit services service-set service-set-name]
    user@host# set pcef-profile pcef-profile-name 
    
  6. Enable application identification for the service set. Use the profile name that you configured in Step 2.
    content_copy zoom_out_map
    [edit services service-set service-set-name]
    user@host# set application-identification-profile app-id-profile-name 
    
  7. Enable HTTP header enrichment for the service set. Use the profile name that you configured in Step 3.
    content_copy zoom_out_map
    [edit services service-set service-set-name]
    user@host# set hcm-profile hcm-profile-name 
    
  8. Specify NAT rules or rule-sets for the service set.
    content_copy zoom_out_map
    [edit services service-set service-set-name]
    user@host# set ([nat-rules rule-name] | nat-rule-sets rule-set-name)
    
  9. Specify the services PIC interface on which the services are performed.
    content_copy zoom_out_map
    [edit services service-set service-set-name]
    user@host# set interface-service service-interface interface-name 
    

    The interface-name is amsn if you have redundancy configured and is ms-fpc/pci/0 if you do not have redundancy configured.

  10. Apply the service set to the TDF interface (mif) that is part of the TDF domain.
    content_copy zoom_out_map
    [edit interfaces mif unit number family family service]
    user@host# set input service-set service-set-name 
    user@host# set output service-set service-set-name 
    
    Note:

    The output service set for the mif is not used by the MX Series router, but it must be configured so that the configuration commit does not fail.

footer-navigation