Configuring a Service Set

A service set allows you to combine directional rules, stateful firewall rules, CoS rules, and other rules that control the behavior of each service in the service set. Unless you are configuring the service set to be used with VPN aggregation, we recommend you configure the service set for the BGF as a next-hop service set that specifies the inside and outside logical service interfaces on the MultiServices PIC or MS-DPC. You need to configure a service set for each PIC or DPC.

Step-by-Step Procedure

To configure a service set:

Create a service set configuration.


                  
                     [edit services]
                     user@host#edit service-set bgf-svc-set

Configure service set as a next-hop service set.


                  
                     [edit services service-set bgf-svc-set]
                     user@host#edit next-hop-service

Specify the service interface to the inside network. The interface must be a logical interface on the same MultiServices PIC or MS-DPC and must not be used by another service set. This unit number must match the unit number of the inside service domain configured in the service interface.


                  
                     [edit services service-set bgf-svc-set next-hop-service]
                     user@host#set inside-service-interface sp-1/2/0.10

Specify the service interface to the outside network. The interface must be a logical interface on the same PIC or DPC and must not be used by another service set. This unit number must match the unit number of the outside service domain configured in the service interface.


                  
                     [edit services service-set bgf-svc-set next-hop-service]
                     user@host#set outside-service-interface sp-1/2/0.20

Specify the name of the BGF rule or rule set that applies to this service set.


                  
                     [edit services service-set bgf-svc-set]
                     user@host#set pgcp-rules bgf-rule-1

Specify the name of the stateful firewall rule that applies to this service set.


                  
                     [edit services service-set bgf-svc-set]
                     user@host#set stateful-firewall-rules r1

Specify the name of the CoS rule that applies to this service set.


                  
                     [edit services service-set bgf-svc-set]
                     user@host#set cos-rules cos-rule

Configure logging for the service set.


                  
                     [edit services service-set bgf-svc-set]
                     user@host#edit syslog host local-1

                     [edit services service-set bgf-svc-set syslog host local-1]
                     user@host#set services any

Related Topics