Navigation
Example: VPN Routing and Forwarding (VRF) and Service Configuration
The following example combines VPN routing and forwarding (VRF) and services configuration:
[edit policy-options]
policy-statement test-policy {term t1 {then reject;}}
[edit routing-instances]test {interface ge-0/2/0.0;interface sp-1/3/0.20;instance-type vrf;route-distinguisher 10.58.255.1:37;vrf-import test-policy;vrf-export test-policy;routing-options {static {route 0.0.0.0/0 next-table inet.0;}}}
[edit interfaces]ge-0/2/0 {unit 0 {family inet {service {input service-set nat-me;output service-set nat-me;}}}}
sp-1/3/0 {unit 0 {family inet;}unit 20 {family inet;service-domain inside;}unit 21 {family inet;service-domain outside;}[edit services]stateful-firewall {rule allow-any-input {match-direction input;term t1 {then accept;}}}nat {pool hide-pool {address 10.58.16.100;port automatic;}rule hide-all-input {match-direction input;term t1 {then {translated {source-pool hide-pool;translation-type source dynamic;}}}}}service-set nat-me {stateful-firewall-rules allow-any-input;nat-rules hide-all-input;interface-service {service-interface sp-1/3/0.20;}}}
