How to Configure Next-Hop Style Service Sets for Next Gen Services
To configure a next-hop service set:
- Configure the service set name.
[edit services] user@host# edit service-set service-set-name
- Specify the services interface inside unit and outside
unit for the service set.
[edit services service-set service-set-name] user@host# set next-hop-service inside-service-interface interface-name.unit-number outside-service-interface interface-name.unit-number
The inside-service-interface must be a service interface logical unit that is configured with
service-domain insideThe outside-service-interface must be a service interface logical unit that is configured withservice-domain outside. - Specify the service rules that the service set applies
to traffic.
For example:
[edit services service-set SS1] user@host# set nat-rule-sets internal-nat
- (Optional) Enable the service set to process unidirectional
traffic.
[edit services service-set service-set-name service-set-options] user@host# set enable-asymmetric-traffic-processing
- Configure a static route to force traffic to the inside
or outside interface of the next-hop service set.
For example, if you want traffic with the destination 198.51.100.33 to be processed by the service set with the inside interface vms-1/0/0.100:
[edit routing-options] user@host# set static route 198.51.100.33 next-hop vms-1/0/0.100