Configure Service Sets

A service set is a collection of services to be performed on the Adaptive Services PIC (AS PIC). To configure service sets, you include the following statements at the [edit services] hierarchy level of the configuration:

[edit services]

service-set service-set-name {

    ([ ids-rules rule-names ] | ids-rule-sets rule-set-name);

    ([ ipsec-vpn-rules rule-names ] | ipsec-vpn-rule-sets rule-set-name);

    ([ nat-rules rule-names ] | nat-rule-sets rule-set-name);

    ([ stateful-firewall-rules rule-names ] | stateful-firewall-rule-sets rule-set-name);

    interface-service {

        service-interface interface-name;

    }

    ipsec-vpn-options {

        local-gateway address;

    }

    next-hop-service {

        inside-service-interface name.number;

        outside-service-interface name.number;

    }

    syslog {

        host hostname {

            services priority-level;

            facility-override facility-name;

            log-prefix prefix-number;

        }

    }

}

adaptive-services-pics {

    traceoptions {

        flag flag;

    }

}

This chapter contains the following sections:

• Configure Service Set Properties
• Apply a Service Set to an Interface
• Trace Adaptive Services PIC Operations
• Example: Configure Service Sets