Apply a Service Set to an Interface

When you have defined and grouped the service rules by configuring the service-set definition, you need to apply services to one or more interfaces installed on the router. To associate a defined service set with an interface, include the service-set statement at the [edit interfaces interface-name unit logical-unit-number family inet service (input | output)] hierarchy level:

[edit interfaces interface-name unit logical-unit-number family inet service]

input {

    [ service-set service-set-name <service-filter filter-name> ];

    post-service-filter filter-name;

}

output {

    [ service-set service-set-name <service-filter filter-name> ];

}

You can configure different service sets on the input and output sides of the interface. You can optionally include filters associated with each service set to refine the target and additionally process the traffic. If you include the service-set statement without a service-filter definition, the router software assumes the match condition is true and selects the service set for processing automatically.

You can also include more than one service set definition on each side of the interface. If you include multiple service sets, the router software evaluates them in the order in which they appear in the configuration. It executes the first service set for which it finds a match in the service filter and ignores the subsequent definitions.

An additional statement allows you to specify a filter for processing the traffic after the input service set is executed. To configure this type of filter, include the post-service-filter statement at the [edit interfaces interface-name unit logical-unit-number family inet service input] hierarchy level:

[edit interfaces interface-name unit logical-unit-number family inet service input]

post-service-filter filter-name;

For an example, see Example: Configure Service Sets.