Configuring IP Inline Reassembly for L2TP
This procedure shows how to configure a service interface on a LAC or LNS to reassembly fragmented IP packets. This example creates a service set that configures the IP reassembly parameters for L2TP fragments. The service set is then associated with the L2TP service.
Before you configure inline IP reassembly, be sure you have:
- Configured L2TP.
- Configured a valid service interface on the LAC or LNS.
To configure inline IP reassembly:
- Configure the chassis-level bandwidth used by the inline
services interface on the FPC and PIC slot for inline IP fragment
reassembly.[edit chassis]user@host# set fpc 2 pic 1 inline-services bandwidth 10g
- Configure the interface-level logical unit used by the
inline services (si-) interface on the FPC and PIC slot
for inline IP fragment reassembly.[edit interfaces]user@host# set si-2/1/0 unit 0 family inet user@host# set si-2/1/0 unit 0 service-domain inside
Note: This configuration is not unique to L2TP. However, you must configure the family (inet) and service domain (inside) as shown.
- Configure the service set (set1) for IP reassembly
in the input match direction. (The local option loops the
reassembled packets back to the local interface.)[edit services]user@host# set service-set set1
[edit services service set ip-reassembly-set]user@host# set ip-reassembly-rules ipr_rule1user@host# set next-hop-service inside-service-interface si-9/1/0.0user@host# set next-hop-service outside-service-interface-type localNote: You must configure both inside (si- interface) and outside type (local) service interfaces statements. The reassembly rule is not formulated outside of the service set; this statement simply initiates the reassembly process.
- Configure the IP reassembly rule parameter[edit services ip-reassembly]user@host# set rule ipr_rule1 match-direction input;
- Configure the service set (set1) for IP reassembly
to bind to the L2TP service.
- The service set must be defined at the [edit services] hierarchy level.
- You cannot delete a service set instance if it is associated with an L2TP service.
[edit services l2tp]user@host# set ip-reassembly service-set set1