TechLibrary
Next Gen Services Interfaces User Guide for Routing Devices - TechLibrary - Juniper Networks
- This topic also exists in the following guides:
- Services Interfaces Overview for Routing Devices - TechLibrary - Juniper Networks
Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All
- Next Gen Services Interfaces User Guide for Routing Devices - TechLibrary - Juniper Networks
- Overview
- Next Gen Services Overview
- Configuration Overview
- Configuration Differences Between Adaptive Services and Next Gen Services on the MX-SPC3
- Next Gen Services Feature Configuration Overview
- How to Configure Services Interfaces for Next Gen Services
- How to Configure Interface-Style Service Sets for Next Gen Services
- How to Configure Next-Hop Style Service Sets for Next Gen Services
- How to Configure Service Set Limits for Next Gen Services
- Enabling and Disabling Next Gen Services
- Global System Logging Overview and Configuration
- Understanding Next Gen Services CGNAT Global System Logging
- Enabling Global System Logging for Next Gen Services
- Configuring Local System Logging for Next Gen Services
- Configuring System Logging to One or More Remote Servers for Next Gen Services
- System Log Error Messages for Next Gen Services
- Configuring Syslog Events for NAT Rule Conditions with Next Gen Services
- Next Gen Services SNMP MIBS and Traps
- Carrier Grade NAT (CGNAT)
- Deterministic NAT Overview and Configuration
- Dynamic Address-Only Source NAT Overview and Configuration
- Network Address Port Translation Overview and Configuration
- NAT46
- Stateful NAT64 Overview and Configuration
- IPv4 Connectivity Across IPv6-Only Network Using 464XLAT Overview and Configuration
- IPv6 NAT Protocol Translation (NAT PT)
- Stateless Source Network Prefix Translation for IPv6 Overview and Configuration
- Transitioning to IPv6 Using Softwires
- Transitioning to IPv6 Using DS-Lite Softwires
- Reducing Traffic and Bandwidth Requirements Using Port Control Protocol
- Transitioning to IPv6 Using Mapping of Address and Port with Encapsulation (MAP-E)
- Monitoring and Troubleshooting Softwires
- Port Forwarding Overview and Configuration
- Port Translation Features Overview and Configuration
- Static Source NAT Overview and Configuration
- Static Destination NAT Overview and Configuration
- Twice NAPT Overview and Configuration
- Twice NAT Overview and Configuration
- Class of Service Overview and Configuration
- Stateful Firewall Services
- Stateful Firewall Services Overview and Configuration
- Intrusion Detection Services
- IDS Screens for Network Attack Protection Overview and Configuration
- Traffic Load Balancing
- Traffic Load Balancing Overview and Configuration
- DNS Request Filtering
- DNS Request Filtering Overview and Configuration
- URL Filtering
- URL Filtering
- Integration of Juniper Sky ATP and Web filtering on MX Routers
- Integration of Juniper Sky ATP and Web filtering on MX Routers
- Aggregated Multiservices Interfaces
- Enabling Load Balancing and High Availability Using Multiservices Interfaces
- Inter-Chassis Services PIC High Availability
- Inter-Chassis Services PIC High Availability Overview and Configuration
- Next Gen Services Inter-chassis High Availability Overview for NAT, Stateful Firewall, and IDS Flows
- Inter-Chassis Stateful Synchronization for Long Lived NAT, Stateful Firewall, and IDS Flows for Next Gen Services
- Inter-Chassis Services Redundancy Overview for Next Gen Services
- Configuring Inter-Chassis Services Redundancy for Next Gen Services
- Inter-Chassis Services PIC High Availability Overview and Configuration
- Application Layer Gateways
- Enabling Traffic to Pass Securely Using Application Layer Gateways
- NAT, Stateful Firewall, and IDS Flows
- Inline NAT Services Overview and Configuration
- Configuration Statements
- Configuration Statements
- address (Address Book Next Gen Services)
- address (NAT Pool Next Gen Services)
- address-pooling (Source NAT Next Gen Services)
- aggregations (IDS Screen Next Gen Services)
- alarm-without-drop (IDS Screen Next Gen Services)
- white-list
- allow-overlapping-pools (NAT Next Gen Services)
- application (NAT Next Gen Services)
- application-profile (Services CoS Next Gen Services)
- application-protocol
- application-set
- applications (Services ALGs)
- automatic (Source NAT Next Gen Services)
- bad-option (IDS Screen Next Gen Services)
- block-allocation (Source NAT Next Gen Services)
- block-frag (IDS Screen Next Gen Services)
- by-destination (IDS Screen Next Gen Services)
- bypass-traffic-on-exceeding-flow-limits
- by-protocol (IDS Screen Next Gen Services)
- by-source (IDS Screen Next Gen Services)
- category
- child-inactivity-timeout
- clat-prefix (Source NAT Next Gen Services)
- clear-dont-fragment-bit (NAT Next Gen Services)
- close-timeout
- cos-rule-sets (Service Set Next Gen Services)
- cos-rules (Service Set Next Gen Services)
- cpu-load-threshold
- cpu-throttle (Next Gen Services)
- data
- description (Security Policies Next Gen Services)
- destination-address (NAT Next Gen Services)
- destination-address-name (NAT Next Gen Services)
- destination-prefix (Destination NAT Next Gen Services)
- deterministic (Source NAT Next Gen Services)
- deterministic-nat-configuration-log-interval (Source NAT Next Gen Services)
- disable-global-timeout-override
- dns-filter
- dns-filter-template
- drop-member-traffic (Aggregated Multiservices)
- dscp (Services CoS)
- ds-lite
- ei-mapping-timeout (Source NAT Next Gen Services)
- enable-asymmetric-traffic-processing (Service Set Next Gen Services)
- enable-rejoin (Aggregated Multiservices)
- enable-subscriber-analysis (Services Options VMS Interfaces)
- event-rate (Next Gen Services Service-Set Local System Logging)
- file (Next Gen Services Global System Logging)
- files (Next Gen Services Global System Logging)
- filename
- filtering-type (Source NAT Next Gen Services)
- fin-no-ack (IDS Screen Next Gen Services)
- flag (Next Gen Services Global System Logging)
- format (Next Gen Services Service-Set Remote System Logging)
- forwarding-class
- forwarding-class (Services PIC Classifiers)
- forwarding-class
- fragment (IDS Screen Next Gen Services)
- fragment-limit
- ftp (Services CoS Next Gen Services)
- gate-timeout
- global-dns-stats-log-timer
- group (Traffic Load Balancer)
- hash-keys (Interfaces)
- header-integrity-check (Next Gen Services)
- high-availability-options (Aggregated Multiservices)
- host (Next Gen Services Service-Set Remote System Logging)
- host-address-base (Source NAT Next Gen Services)
- inactivity-timeout
- inactivity-asymm-tcp-timeout (Service Set Next Gen Services)
- icmp (IDS Screen Next Gen Services)
- icmp-type
- icmpv6-malformed (IDS Screen Next Gen Services)
- ip
- ipv6-extension-header
- limit-session
- inline-services (PIC level)
- ipv6-extension-header (IDS Screen Next Gen Services)
- instance (Traffic Load Balancer)
- interface-service
- land (IDS Screen Next Gen Services)
- large (IDS Screen Next Gen Services)
- limit-session (IDS Screen Next Gen Services)
- load-balancing-options (Aggregated Multiservices)
- local-category (Next Gen Services Service-Set Local System Logging)
- local-log-tag (Next Gen Services Service-Set System Logging)
- loose-source-route-option (IDS Screen Next Gen Services)
- many-to-one (Aggregated Multiservices)
- map-e
- mapping-timeout (Source NAT Next Gen Services)
- mapping-type (Source NAT Next Gen Services)
- match (Next Gen Services Global System Logging)
- match (Services CoS Next Gen Services)
- match (Stateful Firewall Rule Next Gen Services)
- match-direction (NAT Next Gen Services)
- match-rules-on-reverse-flow (Next Gen Services)
- max-session-setup-rate (Service Set)
- max-sessions-per-subscriber (Service Set Next Gen Services)
- maximum
- member-failure-options (Aggregated Multiservices)
- member-interface (Aggregated Multiservices)
- mode (Next Gen Services Service-Set System Logging)
- name (Next Gen Services Global System Logging)
- nat-options (Next Gen Services)
- nat-rule-sets (Service Set Next Gen Services)
- next-hop-service
- no-remote-trace (Next Gen Services Global System Logging)
- no-translation (Source NAT Next Gen Services)
- no-world-readable (Next Gen Services Global System Logging)
- off (Destination NAT Next Gen Services)
- open-timeout
- pcp-rules
- ping-death (IDS Screen Next Gen Services)
- policy (Services CoS Next Gen Services)
- policy (Stateful Firewall Rules Next Gen Services)
- pool (Destination NAT Next Gen Services)
- pool (Source NAT Next Gen Services)
- pool (NAT Rule Next Gen Services)
- pool-default-port-range (Source NAT Next Gen Services)
- pool-utilization-alarm (Source NAT Next Gen Services)
- port (Source NAT Next Gen Services)
- port-forwarding (Destination NAT Next Gen Services)
- port-forwarding-mappings (Destination NAT Rule Next Gen Services)
- port-round-robin (Source NAT Next Gen Services)
- ports-per-session
- preserve-parity (Source NAT Next Gen Services)
- preserve-range (Source NAT Next Gen Services)
- profile (Traffic Load Balancer)
- profile (Web Filter)
- protocol (Applications)
- range (Source NAT Next Gen Services)
- rate
- real-service (Traffic Load Balancer)
- reassembly-timeout
- record-route-option (IDS Screen Next Gen Services)
- redistribute-all-traffic (Aggregated Multiservices)
- redundancy-event (Services Redundancy Daemon)
- redundancy-options (Aggregated Multiservices)
- redundancy-options (Stateful Synchronization)
- redundancy-policy (Interchassis Services Redundancy)
- redundancy-set
- redundancy-set-id (Service Set)
- rejoin-timeout (Aggregated Multiservices)
- rpc-program-number
- rtlog
- rule (Destination NAT Next Gen Services)
- rule (Services CoS Next Gen Services)
- rule
- rule (Source NAT Next Gen Services)
- rule-set (Services CoS Next Gen Services)
- rule-set (Softwires Next Gen Services)
- secure-nat-mapping (Source NAT Next Gen Services)
- security-intelligence
- security-intelligence-policy
- security-option (IDS Screen Next Gen Services)
- server
- service-domain
- service-interface (Services Interfaces)
- services-options
- service-set (Interfaces)
- service-set
- service-set-options
- session-limit
- session-limit (Service Set Next Gen Services)
- session-timeout (Service Set Next Gen Services)
- severity (Next Gen Services Service-Set Remote System Logging)
- sip (Services CoS Next Gen Services)
- size (Next Gen Services Global System Logging)
- snmp-command
- snmp-trap-thresholds (Next Gen Services)
- softwire-name (Next Gen Services)
- softwires
- softwire-name
- softwire-options
- softwire-types
- softwires-rule-set (Service Set Next Gen Services)
- source-address (Next Gen Services Service-Set Remote System Logging)
- source-address (NAT Next Gen Services)
- source-address-name (NAT Next Gen Services)
- source-port
- source-route-option (IDS Screen Next Gen Services)
- stateful-firewall-rules (Service Set Next Gen Services)
- stateful-firewall-rule-set (Next Gen Services)
- stateful-firewall-rule-sets (Service Set Next Gen Services)
- stream (Next Gen Services Service-Set Remote System Logging)
- stream-option (IDS Screen Next Gen Services)
- strict-source-route-option (IDS Screen Next Gen Services)
- syn-ack-ack-proxy (IDS Screen Next Gen Services)
- syn-fin (IDS Screen Next Gen Services)
- syn-frag (IDS Screen Next Gen Services)
- syslog (Services CoS)
- syslog (Next Gen Services Service-Set System Logging)
- tcp-no-flag (IDS Screen Next Gen Services)
- tcp-session
- tcp-tickles (Service Set Next Gen Services)
- tear-drop (IDS Screen Next Gen Services)
- then (Services CoS Next Gen Services)
- then (Stateful Firewall Rule Next Gen Services)
- timestamp-option (IDS Screen Next Gen Services)
- traceoptions (flow)
- traceoptions (Traffic Load Balancer)
- traceoptions (Next Gen Services Global System Logging)
- traceoptions (Next Gen Services Softwires)
- traffic-load-balance (Traffic Load Balancer)
- transport
- ttl-threshold
- unknown-protocol (IDS Screen Next Gen Services)
- url-filter
- url-filter-profile
- url-filter-template
- uuid
- v6rd
- video
- video (Application Profile)
- virtual-service (Traffic Load Balancer)
- voice
- voice (Application Profile)
- web-filter
- web-filter-profile
- winnuke (IDS Screen Next Gen Services)
- world-readable (Next Gen Services Global System Logging)
- Configuration Statements
- Operational Commands
- Operational Commands
- clear log (Next Gen Services)
- clear services alg statistics
- clear services nat source mappings
- clear services sessions
- clear services sessions analysis
- clear services stateful-firewall flows
- clear services stateful-firewall sip-call
- clear services stateful-firewall sip-register
- clear services stateful-firewall statistics
- clear services subscriber analysis
- clear services web-filter statistics profile
- request services web-filter update dns-filter-database
- request services web-filter validate dns-filter-file-name
- request system disable unified-services
- request system enable unified-services
- show interfaces load-balancing (Aggregated Multiservices)
- show log
- show services alg conversations
- show services alg statistics
- show services cos statistics (Next Gen Services)
- show services inline softwire statistics
- show services inline ip-reassembly statistics
- show services nat destination pool
- show services nat destination rule
- show services nat destination summary
- show services nat ipv6-multicast-interfaces
- show services nat resource-usage source-pool
- show services nat source deterministic
- show services nat source mappings address-pooling-paired
- show services nat source mappings endpoint-independent
- show services nat source mappings pcp
- show services nat source mappings summary
- show services nat source pool
- show services nat source port-block
- show services nat source rule
- show services nat source rule-application
- show services nat source summary
- show services pcp statistics
- show services policies
- show services policies detail
- show services policies hit-count
- show services policies interface
- show services policies service-set
- show services redundancy-group
- show services screen ids-option (Next Gen Services)
- show services screen-statistics service-set (Next Gen Services)
- show services security-intelligence category summary
- show services security-intelligence update status
- show services service-sets cpu-usage
- show services service-sets memory-usage
- show services service-sets plug-ins
- show services service-sets statistic screen-drops (Next Gen Services)
- show services service-sets statistic screen-session-limit-counters (Next Gen Services)
- show services service-sets statistics integrity-drops
- show services service-sets statistics packet-drops
- show services service-sets statistics syslog
- show services service-sets statistics tcp
- show services service-sets summary
- show services sessions (Next Gen Services)
- show services sessions (Aggregated Multiservices)
- show services sessions analysis
- show services sessions analysis (USF)
- show services sessions count
- show services sessions service-set
- show services sessions service-set
- show services sessions softwire
- show services sessions utilization
- show services softwire
- show services softwire flows
- show services softwire statistics
- show services stateful-firewall conversations
- show services stateful-firewall flow-analysis
- show services stateful-firewall flows
- show services stateful-firewall sip-call
- show services stateful-firewall sip-register
- show services stateful-firewall statistics
- show services stateful-firewall statistics application-protocol sip
- show services subscriber analysis
- show services tcp-log
- show services traffic-load-balance statistics
- show services web-filter dns-resolution profile
- show services web-filter dns-resolution-statistics profile template
- show services web-filter secintel-policy status
- show services web-filter statistics dns-filter-template
- show services web-filter statistics profile
- show system unified-services status
- Operational Commands
- Downloads
- Overview
Download This Guide
This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.
English
English
Example: Enabling Loop Protection for Spanning-Tree Protocols
This example blocks and logs the non-designated RSTP port ge-1/2/0 after the BPDU timeout interval expires:
[edit]
protocols {rstp {interface ge-1/2/0 {bpdu-timeout-action block;}}}
 | Note: This is not a complete configuration. You must also fully configure RSTP, including the ge-1/2/0 interface. |
