Examples: Configuring Services Interfaces - JUNOS 9.5 Services Interfaces Configuration Guide

Apply the my-service-set service set on an interface-wide basis. All traffic that is accepted by my_input_filter has my-input-service-set applied to it. After the service set is applied, additional filtering is done using the my_post_service_input_filter filter.


            
               [edit interfaces fe-0/1/0]
               unit 0 {
               
                  
                     family inet {
                     
                        
                           filter {
                           input my_input_filter;
                           output my_output_filter;
                           }
                        
                     
                     
                        
                           service {
                           
                              
                                 input {
                                 service-set my-input-service-set;
                                 post-service-filter my_post_service_input_filter;
                                 }
                              
                           
                           
                              
                                 output {
                                 service-set my-output-service-set;
                                 }
                              
                           
                           }
                        
                     
                     }
                  
               
               }

Configure two redundancy interfaces, rsp0 and rsp1, and associated services.


            
               [edit interfaces]
               rsp0 {
               
                  
                     redundancy-options {
                     primary sp-0/0/0;
                     secondary sp-1/3/0;
                     }
                  
               
               
                  
                     unit 0 {
                     family inet;
                     }
                  
               
               
                  
                     unit 30 {
                     family inet;
                     service-domain inside;
                     }
                  
               
               
                  
                     unit 31 {
                     family inet;
                     service-domain outside;
                     }
                  
               
               }
               rsp1 {
               
                  
                     redundancy-options {
                     primary sp-0/1/0;
                     secondary sp-1/3/0;
                     }
                  
               
               
                  
                     unit 0 {
                     family inet;
                     }
                  
               
               
                  
                     unit 20 {
                     family inet;
                     service-domain inside;
                     }
                  
               
               
                  
                     unit 21 {
                     family inet;
                     service-domain outside;
                     }
                  
               
               }
               [edit services]
               service-set null-sfw-with-nat {
               stateful-firewall-rules allow-all;
               nat-rules rule1;
               
                  
                     next-hop-service {
                     inside-service-interface rsp0.30;
                     outside-service-interface rsp0.31;
                     }
                  
               
               }
               [edit routing-instances]
               vpna {
               interface rsp0.0;
               }