[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuration

To configure the SP BGF router:

CLI Quick Configuration

To quickly configure this example on the SP BGF router, copy the following commands and paste them into the router terminal window:

[edit]
set interfaces sp-1/2/0 description bgf1_bgf2_pgcp_service_ipv4
set interfaces sp-1/2/0 unit 0 family inet
set interfaces sp-1/2/0 unit 10 family inet
set interfaces sp-1/2/0 unit 10 service-domain inside
set interfaces sp-1/2/0 unit 20 family inet
set interfaces sp-1/2/0 unit 20 service-domain outside
set interfaces sp-1/2/0 unit 30 family inet
set interfaces sp-1/2/0 unit 30 service-domain inside
set interfaces sp-1/2/0 unit 40 family inet
set interfaces sp-1/2/0 unit 40 service-domain outside
set interfaces sp-1/2/0 traceoptions flag all
set interfaces sp-1/2/0 services-options syslog host local services any
set interfaces sp-1/2/1 description bgf3_pgcp_service_ipv6
set interfaces sp-1/2/1 unit 0 family inet6
set interfaces sp-1/2/1 unit 10 family inet6
set interfaces sp-1/2/1 unit 10 service-domain inside
set interfaces sp-1/2/1 unit 20 family inet6
set interfaces sp-1/2/1 unit 20 service-domain outside
set interfaces sp-1/2/1 traceoptions flag all
set interfaces sp-1/2/1 services-options syslog host local services any
set services pgcp gateway bgf-1 gateway-address 172.16.10.1
set services pgcp gateway bgf-1 gateway-port 2944
set services pgcp gateway bgf-1 cleanup-timeout 3600
set services pgcp gateway bgf-2 gateway-address 172.16.20.2
set services pgcp gateway bgf-2 gateway-port 2944
set services pgcp gateway bgf-2 cleanup-timeout 3600
set services pgcp gateway bgf-3 gateway-address 172.16.30.3
set services pgcp gateway bgf-3 gateway-port 2944
set services pgcp gateway bgf-3 cleanup-timeout 3600
set services pgcp gateway bgf-1 gateway-controller gc-1 controller-address 33.0.0.1
set services pgcp gateway bgf-1 gateway-controller gc-1 controller-port 2944
set services pgcp gateway bgf-1 gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
set services pgcp gateway bgf-2 gateway-controller gc-1 controller-address 33.0.0.1
set services pgcp gateway bgf-2 gateway-controller gc-1 controller-port 2944
set services pgcp gateway bgf-2 gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
set services pgcp gateway bgf-3 gateway-controller gc-1 controller-address 33.0.0.1
set services pgcp gateway bgf-3 gateway-controller gc-1 controller-port 2944
set services pgcp gateway bgf-3 gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
set services nat pool bgf1_peer_rtp-nat-pool-1 address 11.0.0.5
set services nat pool bgf1_peer_rtp-nat-pool-1 port automatic
set services nat pool bgf1_peer_rtp-nat-pool-1 pgcp
set services nat pool bgf1_peer_rtp-nat-pool-1 pgcp ports-per-session 2
set services nat pool bgf2_peer_rtp-nat-pool-2 address 11.0.0.25
set services nat pool bgf2_peer_rtp-nat-pool-2 port automatic
set services nat pool bgf2_peer_rtp-nat-pool-2 pgcp
set services nat pool bgf2_peer_rtp-nat-pool-2 pgcp ports-per-session 2
set services nat pool bgf3_peer_rtp-nat-pool-3 address 2001:db8:10:3::100/128
set services nat pool bgf3_peer_rtp-nat-pool-3 port automatic
set services nat pool bgf3_peer_rtp-nat-pool-3 pgcp
set services nat pool bgf3_peer_rtp-nat-pool-3 pgcp ports-per-session 2
set services nat pool bgf1_core_rtp-nat-pool-4 address 10.0.0.5
set services nat pool bgf1_core_rtp-nat-pool-4 port automatic
set services nat pool bgf1_core_rtp-nat-pool-4 pgcp
set services nat pool bgf1_core_rtp-nat-pool-4 pgcp ports-per-session 2
set services nat pool bgf2_core_rtp-nat-pool-5 address 10.0.0.25
set services nat pool bgf2_core_rtp-nat-pool-5 port automatic
set services nat pool bgf2_core_rtp-nat-pool-5 pgcp
set services nat pool bgf2_core_rtp-nat-pool-5 pgcp ports-per-session 4
set services nat pool bgf3_core_rtp-nat-pool-6 address 2001:db8:13:2::100/128
set services nat pool bgf3_core_rtp-nat-pool-6 port automatic
set services nat pool bgf3_core_rtp-nat-pool-6 pgcp
set services nat pool bgf3_core_rtp-nat-pool-6 pgcp ports-per-session 2
set services nat pool vgp1_peer_sip-nat-pool-7 address 11.0.0.2
set services nat pool vgp1_peer_sip-nat-pool-7 port range low 10000 high 50000
set services nat pool vgp1_peer_sip-nat-pool-7 pgcp
set services nat pool vgp1_peer_sip-nat-pool-7 pgcp remotely-controlled
set services nat pool vgp1_peer_sip-nat-pool-7 pgcp ports-per-session 2
set services nat pool bgf1_core_sip-nat-pool-8 address 10.0.0.2
set services nat pool bgf1_core_sip-nat-pool-8 port range low 10000 high 50000
set services nat pool bgf1_core_sip-nat-pool-8 pgcp
set services nat pool bgf1_core_sip-nat-pool-8 pgcp remotely-controlled
set services nat pool bgf1_core_sip-nat-pool-8 pgcp ports-per-session 2
set services pgcp media-service bgf1_peer_rtp_ms1 nat-pool bgf1_peer_rtp-nat-pool-1
set services pgcp media-service bgf1_core_rtp_ms4 nat-pool bgf1_core_rtp-nat-pool-4
set services pgcp media-service bgf1_peer_sip_ms7 nat-pool bgf1_peer_sip-nat-pool-7
set services pgcp media-service bgf1_core_sip_ms8 nat-pool bgf1_core_sip-nat-pool-8
set services pgcp media-service bgf2_peer_rtp_ms2 nat-pool bgf2_peer_rtp-nat-pool-2
set services pgcp media-service bgf2_core_rtp_ms5 nat-pool bgf2_core_rtp-nat-pool-5
set services pgcp media-service bgf3_peer_rtp_ms3 nat-pool bgf3_peer_rtp-nat-pool-3
set services pgcp media-service bgf3_core_rtp_ms6 nat-pool bgf3_core_rtp-nat-pool-6
set services pgcp virtual-interface 1 media-service bgf1_core_rtp_ms4
set services pgcp virtual-interface 1 media-service bgf1_core_sip_ms8
set services pgcp virtual-interface 1 media-service bgf2_core_rtp_ms5
set services pgcp virtual-interface 1 media-service bgf3_core_rtp_ms6
set services pgcp virtual-interface 2 media-service bgf1_peer_rtp_ms1
set services pgcp virtual-interface 2 media-service bgf1_peer_sip_ms7
set services pgcp virtual-interface 2 media-service bgf2_peer_rtp_ms2
set services pgcp virtual-interface 2 media-service bgf3_peer_rtp_ms3
set services pgcp rule bgf-rule1 gateway bgf-1 media-service bgf1_peer_rtp_ms1
set services pgcp rule bgf-rule1 gateway bgf-1 media-service bgf1_peer_sip_ms7
set services pgcp rule bgf-rule1 gateway bgf-1 media-service bgf1_core_rtp_ms4
set services pgcp rule bgf-rule1 gateway bgf-1 media-service bgf1_core_sip_ms8
set services pgcp rule bgf-rule2 gateway bgf-2 media-service bgf2_peer_rtp_ms2
set services pgcp rule bgf-rule2 gateway bgf-2 media-service bgf2_core_rtp_ms5
set services pgcp rule bgf-rule3 gateway bgf-3 media-service bgf3_peer_rtp_ms3
set services pgcp rule bgf-rule3 gateway bgf-3 media-service bgf3_core_rtp_ms6
set services stateful-firewall rule r1 match-direction input-output term t1 then reject
set services service-set bgf1-svc-set pgcp-rules bgf-rule1
set services service-set bgf1-svc-set stateful-firewall-rules r1
set services service-set bgf1-svc-set next-hop-service inside-service-interface sp-1/2/0.10
set services service-set bgf1-svc-set next-hop-service outside-service-interface sp-1/2/0.20
set services service-set bgf1-svc-set syslog host local-1 services any
set services service-set bgf2-svc-set pgcp-rules bgf-rule2
set services service-set bgf2-svc-set stateful-firewall-rules r1
set services service-set bgf2-svc-set next-hop-service inside-service-interface sp-1/2/0.30
set services service-set bgf2-svc-set next-hop-service outside-service-interface sp-1/2/0.40
set services service-set bgf2-svc-set syslog host local-1 services any
set services service-set bgf3-svc-set pgcp-rules bgf-rule3
set services service-set bgf3-svc-set stateful-firewall-rules r1
set services service-set bgf3-svc-set next-hop-service inside-service-interface sp-1/2/1.10
set services service-set bgf3-svc-set next-hop-service outside-service-interface sp-1/2/1.20
set services service-set bgf3-svc-set syslog host local-1 services any
set services pgcp gateway bgf-1 h248-properties diffserv dscp 1D

Configuring the Service Interfaces

CLI Quick Configuration

To quickly configure the service interfaces, copy the following commands and paste them into the router terminal window:

[edit interfaces]
set sp-1/2/0 description bgf1_bgf2_pgcp_service_ipv4
set sp-1/2/0 unit 0 family inet
set sp-1/2/0 unit 10 family inet
set sp-1/2/0 unit 10 service-domain inside
set sp-1/2/0 unit 20 family inet
set sp-1/2/0 unit 20 service-domain outside
set sp-1/2/0 unit 30 family inet
set sp-1/2/0 unit 30 service-domain inside
set sp-1/2/0 unit 40 family inet
set sp-1/2/0 unit 40 service-domain outside
set sp-1/2/0 traceoptions flag all
set sp-1/2/0 services-options syslog host local services any
set sp-1/2/1 description bgf3_pgcp_service_ipv6
set sp-1/2/1 unit 0 family inet6
set sp-1/2/1 unit 10 family inet6
set sp-1/2/1 unit 10 service-domain inside
set sp-1/2/1 unit 20 family inet6
set sp-1/2/1 unit 20 service-domain outside
set sp-1/2/1 traceoptions flag all
set sp-1/2/1 services-options syslog host local services any

Step-by-Step Procedure

To configure the service interface:

  1. Create the interface, and enter edit mode for the interface.
    [edit interfaces]
    user@sp-bgf-router#edit sp-1/2/0
  2. Configure an IPv4 service interface for BGF–1 and BGF–2.
    [edit interfaces sp-1/2/0]
    user@sp-bgf-router#set description bgf1_bgf2_pgcp_service_ipv4
    user@sp-bgf-router#set unit 0 family inet
    user@sp-bgf-router#set unit 10 family inet
    user@sp-bgf-router#set unit 10 service-domain inside
    user@sp-bgf-router#set unit 20 family inet
    user@sp-bgf-router#set unit 20 service-domain outside
    user@sp-bgf-router#set unit 30 family inet
    user@sp-bgf-router#set unit 30 service-domain inside
    user@sp-bgf-router#set unit 40 family inet
    user@sp-bgf-router#set unit 40 service-domain outside
    user@sp-bgf-router#set traceoptions flag all
    user@sp-bgf-router#set services-options syslog host local services any
  3. Configure an IPv6 service interface for BGF–3.
    [edit interfaces sp-1/2/1]
    user@sp-bgf-router#set sp-1/2/1 description bgf3_pgcp_service_ipv6
    user@sp-bgf-router#set sp-1/2/1 unit 0 family inet6
    user@sp-bgf-router#set sp-1/2/1 unit 10 family inet6
    user@sp-bgf-router#set sp-1/2/1 unit 10 service-domain inside
    user@sp-bgf-router#set sp-1/2/1 unit 20 family inet6
    user@sp-bgf-router#set sp-1/2/1 unit 20 service-domain outside
    user@sp-bgf-router#set sp-1/2/1 traceoptions flag all
    user@sp-bgf-router#set sp-1/2/1 services-options syslog host local services any

Configuration Results

Display the results of the configuration.

[edit interfaces]
user@sp-bgf-router# show
sp-1/2/0 {
description bgf1_bgf2_pgcp_service_ipv4;
traceoptions {
flag all;
}
services-options {
syslog {
host local {
services any;
}
}
}
unit 0 {
family inet;
}
unit 10 {
family inet;
service-domain inside;
}
unit 20 {
family inet;
service-domain outside;
}
unit 30 {
family inet;
service-domain inside;
}
unit 40 {
family inet;
service-domain outside;
}
}
sp-1/2/1 {
description bgf3_pgcp_service_ipv6;
traceoptions {
flag all;
}
services-options {
syslog {
host local {
services any;
}
}
}
unit 0 {
family inet6;
}
unit 10 {
family inet6;
service-domain inside;
}
unit 20 {
family inet6;
service-domain outside;
}
}

Configuring the Virtual BGFs

CLI Quick Configuration

To quickly configure the virtual BGFs, copy the following commands and paste them into the router terminal window:

[edit services pgcp]
set gateway bgf-1 gateway-address 172.16.10.1
set gateway bgf-1 gateway-port 2944
set gateway bgf-1 cleanup-timeout 3600
set gateway bgf-1 gateway-controller gc-1 controller-address 33.0.0.1
set gateway bgf-1 gateway-controller gc-1 controller-port 2944
set gateway bgf-1 gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
set gateway bgf-2 gateway-address 172.16.20.2
set gateway bgf-2 gateway-port 2944
set gateway bgf-2 cleanup-timeout 3600
set gateway bgf-2 gateway-controller gc-1 controller-address 33.0.0.1
set gateway bgf-2 gateway-controller gc-1 controller-port 2944
set gateway bgf-2 gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
set gateway bgf-3 gateway-address 172.16.30.3
set gateway bgf-3 gateway-port 2944
set gateway bgf-3 cleanup-timeout 3600
set gateway bgf-3 gateway-controller gc-1 controller-address 33.0.0.1
set gateway bgf-3 gateway-controller gc-1 controller-port 2944
set gateway bgf-3 gateway-controller gc-1 interim-ah-scheme algorithm hmac-null

Step-by-Step Procedure

To configure the virtual BGFs:

  1. Configure BGF-1.
    [edit services pgcp]
    user@sp-bgf-router#edit gateway bgf-1
    [edit services pgcp gateway bgf-1]
    user@sp-bgf-router#set gateway-address 172.16.10.1
    user@sp-bgf-router#set gateway-port 2944
    user@sp-bgf-router#set cleanup-timeout 3600
    user@sp-bgf-router#set gateway-controller gc-1 controller-address 33.0.0.1
    user@sp-bgf-router#set gateway-controller gc-1 controller-port 2944
    user@sp-bgf-router#set gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
  2. Configure BGF-2.
    [edit services pgcp]
    user@sp-bgf-router#edit gateway bgf-2
    [edit services pgcp gateway bgf-2]
    user@sp-bgf-router#set gateway-address 172.16.20.2
    user@sp-bgf-router#set gateway-port 2944
    user@sp-bgf-router#set cleanup-timeout 3600
    user@sp-bgf-router#set gateway-controller gc-1 controller-address 33.0.0.1
    user@sp-bgf-router#set gateway-controller gc-1 controller-port 2944
    user@sp-bgf-router#set gateway-controller gc-1 interim-ah-scheme algorithm hmac-null
  3. Configure BGF-3.
    [edit services pgcp]
    user@sp-bgf-router#edit gateway bgf-3
    [edit services pgcp gateway bgf-3]
    user@sp-bgf-router#set gateway-address 172.16.30.3
    user@sp-bgf-router#set gateway-port 2944
    user@sp-bgf-router#set cleanup-timeout 3600
    user@sp-bgf-router#set gateway-controller gc-1 controller-address 33.0.0.1
    user@sp-bgf-router#set gateway-controller gc-1 controller-port 2944
    user@sp-bgf-router#set gateway-controller gc-1 interim-ah-scheme algorithm hmac-null

Configuration Results

Display the results of the configuration.

[edit services pgcp]
user@sp-bgf-router# show
gateway bgf-1 {
gateway-address 172.16.10.1;
gateway-port 2944;
cleanup-timeout 3600;
gateway-controller gc-1 {
controller-address 33.0.0.1;
controller-port 2944;
interim-ah-scheme {
algorithm hmac-null;
}
}
}
gateway bgf-2 {
gateway-address 172.16.20.2;
gateway-port 2944;
cleanup-timeout 3600;
gateway-controller gc-1 {
controller-address 33.0.0.1;
controller-port 2944;
interim-ah-scheme {
algorithm hmac-null;
}
}
}
gateway bgf-3 {
gateway-address 172.16.30.3;
gateway-port 2944;
cleanup-timeout 3600;
gateway-controller gc-1 {
controller-address 33.0.0.1;
controller-port 2944;
interim-ah-scheme {
algorithm hmac-null;
}
}
}
## Warning: missing mandatory statement(s): 'virtual-interface'

Configuring NAT Pools

CLI Quick Configuration

To quickly configure the NAT pools, copy the following commands and paste them into the router terminal window:

[edit services nat]
set pool bgf1_peer_rtp-nat-pool-1 address 11.0.0.5
set pool bgf1_peer_rtp-nat-pool-1 port automatic
set pool bgf1_peer_rtp-nat-pool-1 pgcp
set pool bgf1_peer_rtp-nat-pool-1 pgcp ports-per-session 2
set pool bgf2_peer_rtp-nat-pool-2 address 11.0.0.25
set pool bgf2_peer_rtp-nat-pool-2 port automatic
set pool bgf2_peer_rtp-nat-pool-2 pgcp
set pool bgf2_peer_rtp-nat-pool-2 pgcp ports-per-session 2
set pool bgf3_peer_rtp-nat-pool-3 address 2001:db8:10:3::100/128
set pool bgf3_peer_rtp-nat-pool-3 port automatic
set pool bgf3_peer_rtp-nat-pool-3 pgcp
set pool bgf3_peer_rtp-nat-pool-3 pgcp ports-per-session 2
set pool bgf1_core_rtp-nat-pool-4 address 10.0.0.5
set pool bgf1_core_rtp-nat-pool-4 port automatic
set pool bgf1_core_rtp-nat-pool-4 pgcp
set pool bgf1_core_rtp-nat-pool-4 pgcp ports-per-session 2
set pool bgf2_core_rtp-nat-pool-5 address 10.0.0.25
set pool bgf2_core_rtp-nat-pool-5 port automatic
set pool bgf2_core_rtp-nat-pool-5 pgcp
set pool bgf2_core_rtp-nat-pool-5 pgcp ports-per-session 4
set pool bgf3_core_rtp-nat-pool-6 address 2001:db8:13:2::100/128
set pool bgf3_core_rtp-nat-pool-6 port automatic
set pool bgf3_core_rtp-nat-pool-6 pgcp
set pool bgf3_core_rtp-nat-pool-6 pgcp ports-per-session 2
set pool vgp1_peer_sip-nat-pool-7 address 11.0.0.2
set pool vgp1_peer_sip-nat-pool-7 port range low 10000 high 50000
set pool vgp1_peer_sip-nat-pool-7 pgcp
set pool vgp1_peer_sip-nat-pool-7 pgcp remotely-controlled
set pool vgp1_peer_sip-nat-pool-7 pgcp ports-per-session 2
set pool bgf1_core_sip-nat-pool-8 address 10.0.0.2
set pool bgf1_core_sip-nat-pool-8 port range low 10000 high 50000
set pool bgf1_core_sip-nat-pool-8 pgcp
set pool bgf1_core_sip-nat-pool-8 pgcp remotely-controlled
set pool bgf1_core_sip-nat-pool-8 pgcp ports-per-session 2

Step-by-Step Procedure

To configure NAT pools:

  1. Create a media (RTP) NAT pool for BGF-1 for the access (peering) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf1_peer_rtp-nat-pool-1
    [edit services nat pool bgf1_peer_rtp-nat-pool-1]
    user@sp-bgf-router#set address 11.0.0.5
    user@sp-bgf-router#set port automatic
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pool pg1_peer_rtp-nat-pool-1 pgcp ports-per-session 2
  2. Create a media (RTP) NAT pool for BGF-2 for the access (peering) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf2_peer_rtp-nat-pool-2
    [edit services nat pool bgf2_peer_rtp-nat-pool-2]
    user@sp-bgf-router#set address 11.0.0.25
    user@sp-bgf-router#set port automatic
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pgcp ports-per-session 2
  3. Create a media (RTP) NAT pool for BGF-3 for the access (peering) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf3_peer_rtp-nat-pool-3
    [edit services nat pool bgf3_peer_rtp-nat-pool-3]
    user@sp-bgf-router#set address 2001:db8:10:3::100/128
    user@sp-bgf-router#set port automatic
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pgcp ports-per-session 2
  4. Create a media (RTP) NAT pool for BGF-1 for the backbone (service provider) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf1_core_rtp-nat-pool-4
    [edit services nat pool bgf1_core_rtp-nat-pool-4]
    user@sp-bgf-router#set address 10.0.0.5
    user@sp-bgf-router#set port automatic
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pgcp ports-per-session 2
  5. Create a media (RTP) NAT pool for BGF-2 for the backbone (service provider) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf2_core_rtp-nat-pool-5
    [edit services nat pool bgf2_core_rtp-nat-pool-5]
    user@sp-bgf-router#set address 10.0.0.25
    user@sp-bgf-router#set port automatic
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set ports-per-session 4
  6. Create a media (RTP) NAT pool for BGF-3 for the backbone (service provider) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf3_core_rtp-nat-pool-6
    [edit services nat pool bgf3_core_rtp-nat-pool-6]
    user@sp-bgf-router#set address 2001:db8:13:2::100/128
    user@sp-bgf-router#set port automatic
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pgcp ports-per-session 2
  7. Configure a signaling (SIP) NAT pool for BGF-1 for the access (peering) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool vgp1_peer_sip-nat-pool-7
    [edit services nat pool vgp1_peer_sip-nat-pool-7]
    user@sp-bgf-router#set address 11.0.0.2
    user@sp-bgf-router#set port range low 10000 high 50000
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pgcp remotely-controlled
    user@sp-bgf-router#set ports-per-session 2
  8. Configure a signaling (SIP) NAT pool for the backbone (service provider) side of the network.
    [edit services nat]
    user@sp-bgf-router#edit pool bgf1_core_sip-nat-pool-8
    [edit services nat pool bgf1_core_sip-nat-pool-8]
    user@sp-bgf-router#set address 10.0.0.2
    user@sp-bgf-router#set port range low 10000 high 50000
    user@sp-bgf-router#set pgcp
    user@sp-bgf-router#set pgcp remotely-controlled
    user@sp-bgf-router#set pgcp ports-per-session 2

Configuration Results

Display the results of the configuration.

[edit services nat]
user@sp-bgf-router# show
pool bgf1_peer_rtp-nat-pool-1 {
pgcp {
ports-per-session 2;
}
address 11.0.0.5/32;
port automatic;
}
pool bgf2_peer_rtp-nat-pool-2 {
pgcp {
ports-per-session 2;
}
address 11.0.0.25/32;
port automatic;
}
pool bgf3_peer_rtp-nat-pool-3 {
pgcp {
ports-per-session 2;
}
address 2001:db8:10:3::100/128;
port automatic;
}
pool bgf1_core_rtp-nat-pool-4 {
pgcp {
ports-per-session 2;
}
address 10.0.0.5/32;
port automatic;
}
pool bgf2_core_rtp-nat-pool-5 {
pgcp {
ports-per-session 4;
}
address 10.0.0.25/32;
port automatic;
}
pool bgf3_core_rtp-nat-pool-6 {
pgcp {
ports-per-session 2;
}
address 2001:db8:13:2::100/128;
port automatic;
}
pool vgp1_peer_sip-nat-pool-7 {
pgcp {
remotely-controlled;
ports-per-session 2;
}
address 11.0.0.2/32;
port range low 10000 high 50000;
}
pool bgf1_core_sip-nat-pool-8 {
pgcp {
remotely-controlled;
ports-per-session 2;
}
address 10.0.0.2/32;
port range low 10000 high 50000;
}

Assigning the NAT Pools to a Media Service

CLI Quick Configuration

To quickly create media services and assign NAT pools to a media service, copy the following commands and paste them into the router terminal window:

[edit services pgcp]
set media-service bgf1_peer_rtp_ms1 nat-pool bgf1_peer_rtp-nat-pool-1
set media-service bgf1_core_rtp_ms4 nat-pool bgf1_core_rtp-nat-pool-4
set media-service bgf1_peer_sip_ms7 nat-pool bgf1_peer_sip-nat-pool-7
set media-service bgf1_core_sip_ms8 nat-pool bgf1_core_sip-nat-pool-8
set media-service bgf2_peer_rtp_ms2 nat-pool bgf2_peer_rtp-nat-pool-2
set media-service bgf2_core_rtp_ms5 nat-pool bgf2_core_rtp-nat-pool-5
set media-service bgf3_peer_rtp_ms3 nat-pool bgf3_peer_rtp-nat-pool-3
set media-service bgf3_core_rtp_ms6 nat-pool bgf3_core_rtp-nat-pool-6

Step-by-Step Procedure

To configure a media service:

  1. Configure media services for each of the NAT pools for BGF-1.
    [edit services pgcp]
    user@sp-bgf-router#set media-service bgf1_peer_rtp_ms1 nat-pool bgf1_peer_rtp-nat-pool-1
    user@sp-bgf-router#set media-service bgf1_core_rtp_ms4 nat-pool bgf1_core_rtp-nat-pool-4
    user@sp-bgf-router#set media-service bgf1_peer_sip_ms7 nat-pool vgp1_peer_sip-nat-pool-7
    user@sp-bgf-router#set media-service bgf1_core_sip_ms8 nat-pool bgf1_core_sip-nat-pool-8
  2. Configure a media service for each of the NAT pools for BGF-2.
    [edit services pgcp]
    user@sp-bgf-router#set media-service bgf2_peer_rtp_ms2 nat-pool bgf2_peer_rtp-nat-pool-2
    user@sp-bgf-router#set media-service bgf2_core_rtp_ms5 nat-pool bgf2_core_rtp-nat-pool-5
  3. Configure media services for each of the NAT pools for BGF-3.
    [edit services pgcp]
    user@sp-bgf-router#set media-service bgf3_peer_rtp_ms3 nat-pool bgf3_peer_rtp-nat-pool-3
    user@sp-bgf-router#set media-service bgf3_core_rtp_ms6 nat-pool bgf3_core_rtp-nat-pool-6

Configuration Results

Display the results of the configuration.

[edit services pgcp]
user@sp-bgf-router#show
...
media-service bgf1_peer_rtp_ms1 {
nat-pool bgf1_peer_rtp-nat-pool-1;
}
media-service bgf1_core_rtp_ms4 {
nat-pool bgf1_core_rtp-nat-pool-4;
}
media-service bgf2_peer_rtp_ms2 {
nat-pool bgf2_peer_rtp-nat-pool-2;
}
media-service bgf2_core_rtp_ms5 {
nat-pool bgf2_core_rtp-nat-pool-5;
}
media-service bgf3_peer_rtp_ms3 {
nat-pool bgf3_peer_rtp-nat-pool-3;
}
media-service bgf3_core_rtp_ms6 {
nat-pool bgf3_core_rtp-nat-pool-6;
}
media-service bgf1_peer_sip_ms7 {
nat-pool bgf1_peer_sip-nat-pool-7;
}
media-service bgf1_core_sip_ms8 {
nat-pool bgf1_core_sip-nat-pool-8;
}
## Warning: missing mandatory statement(s): 'virtual-interface'

Configuring the Virtual Interfaces

CLI Quick Configuration

To quickly configure the virtual interfaces, copy the following commands and paste them into the router terminal window:

[edit services pgcp]
set virtual-interface 1 media-service bgf1_core_rtp_ms4
set virtual-interface 1 media-service bgf1_core_sip_ms8
set virtual-interface 1 media-service bgf2_core_rtp_ms5
set virtual-interface 1 media-service bgf3_core_rtp_ms6
set virtual-interface 2 media-service bgf1_peer_rtp_ms1
set virtual-interface 2 media-service bgf1_peer_sip_ms7
set virtual-interface 2 media-service bgf2_peer_rtp_ms2
set virtual-interface 2 media-service bgf3_peer_rtp_ms3

Step-by-Step Procedure

To configure a virtual interface:

  1. Create a virtual interface for the backbone (service provider) side of the network. Specify the names of the media services that contains the NAT pool to be used for gates on the virtual interface that you are configuring.
    [edit services pgcp]
    edit virtual-interface 1
    [edit services pgcp virtual-interface 1]
    user@sp-bgf-router#set media-service bgf1_core_rtp_ms4
    user@sp-bgf-router#set media-service bgf1_core_sip_ms8
    user@sp-bgf-router#set media-service bgf2_core_rtp_ms5
    user@sp-bgf-router#set media-service bgf3_core_rtp_ms6
  2. Create a virtual interface for the access (peering) side of the network. Specify the names of the media services that contains the NAT pool to be used for gates on the virtual interface that you are configuring.
    [edit services pgcp]
    edit virtual-interface 2
    [edit services pgcp virtual-interface 2]
    user@sp-bgf-router#set media-service bgf1_peer_rtp_ms1
    user@sp-bgf-router#set media-service bgf1_peer_sip_ms7
    user@sp-bgf-router#set media-service bgf2_peer_rtp_ms2
    user@sp-bgf-router#set media-service bgf3_peer_rtp_ms3

Configuration Results

Display the results of the configuration.

[edit services pgcp virtual-interface 1]
user@sp-bgf-router# show
virtual-interface 1 {
media-service [ bgf1_core_rtp_ms4 bgf1_core_sip_ms8 bgf2_core_rtp_ms5 bgf3_core_rtp_ms6 ];
}
virtual-interface 2 {
media-service [ bgf1_peer_rtp_ms1 bgf1_peer_sip_ms7 bgf2_peer_rtp_ms2 bgf3_peer_rtp_ms3 ];
}

Configuring Rules for the BGF

You define rules that specify the NAT pool (media service) used on a specific virtual BGF.

CLI Quick Configuration

To quickly define the rules, copy the following commands and paste them into the router terminal window:

[edit services pgcp]
set rule bgf-rule1 gateway bgf-1 media-service bgf1_peer_rtp_ms1
set rule bgf-rule1 gateway bgf-1 media-service bgf1_peer_sip_ms7
set rule bgf-rule1 gateway bgf-1 media-service bgf1_core_rtp_ms4
set rule bgf-rule1 gateway bgf-1 media-service bgf1_core_sip_ms8
set rule bgf-rule2 gateway bgf-2 media-service bgf2_peer_rtp_ms2
set rule bgf-rule2 gateway bgf-2 media-service bgf2_core_rtp_ms5
set rule bgf-rule3 gateway bgf-3 media-service bgf3_peer_rtp_ms3
set rule bgf-rule3 gateway bgf-3 media-service bgf3_core_rtp_ms6

Step-by-Step Procedure

To configure the rules for the BGF:

  1. Create a rule for BGF-1, and specify the media services that contains the NAT pools to be used for this virtual BGF.
    [edit services pgcp]
    user@sp-bgf-router#edit rule bgf-rule1
    [edit services pgcp rule bgf-rule1]
    user@sp-bgf-router#set gateway bgf-1
    user@sp-bgf-router#set media-service bgf1_peer_rtp_ms1
    user@sp-bgf-router#set media-service bgf1_peer_sip_ms7
    user@sp-bgf-router#set media-service bgf1_core_rtp_ms4
    user@sp-bgf-router#set media-service bgf1_core_sip_ms8
  2. Create a rule for BGF-2, and specify the media services that contains the NAT pools to be used for this virtual BGF.
    [edit services pgcp]
    user@sp-bgf-router#edit rule bgf-rule2
    [edit services pgcp rule bgf-rule2]
    user@sp-bgf-router#set gateway bgf-2
    user@sp-bgf-router#set media-service bgf2_peer_rtp_ms2
    user@sp-bgf-router#set media-service bgf2_core_rtp_ms5
  3. Create a rule for BGF-3, and specify the media services that contains the NAT pools to be used for this virtual BGF.
    [edit services pgcp]
    user@sp-bgf-router#edit rule bgf-rule3
    [edit services pgcp rule bgf-rule3]
    user@sp-bgf-router#set gateway bgf-3
    set rule bgf-rule3 gateway bgf-3 media-service bgf3_peer_rtp_ms3
    set rule bgf-rule3 gateway bgf-3 media-service bgf3_core_rtp_ms6

Configuration Results

Display the results of the configuration.

[edit services pgcp]
user@sp-bgf-router# show
. . .
rule bgf-rule1 {
gateway bgf-1;
media-service [ bgf1_peer_rtp_ms1 bgf1_peer_sip_ms7 bgf1_core_rtp_ms4 bgf1_core_sip_ms8 ];
}
rule bgf-rule2 {
gateway bgf-2;
media-service [ bgf2_peer_rtp_ms2 bgf2_core_rtp_ms5 ];
}
rule bgf-rule3 {
gateway bgf-3;
media-service [ bgf3_peer_rtp_ms3 bgf3_core_rtp_ms6 ];
}

Configuring a Stateful Firewall

You define rules that specify the NAT pool (media service) used on a specific virtual BGF.

CLI Quick Configuration

To quickly define the rules, copy the following commands and paste them into the router terminal window:

[edit services stateful-firewall]
set rule r1 match-direction input-outputset rule r1 term t1 then reject

Step-by-Step Procedure

To create a stateful firewall:

  1. Create a stateful firewall rule.
    [edit services stateful-firewall]
    user@host#edit rule r1
  2. Set the match direction for the rule.
    [edit services stateful-firewall rule r1]
    user@host#set match-direction input-output
  3. Add a term to the rule with the action set to reject.
    [edit services stateful-firewall rule r1]
    user@host#set term t1 then reject

Configuration Results

Display the results of the configuration.

[edit services stateful-firewall]
user@sp-bgf-router# show
rule r1 {
match-direction input-output;
term t1 {
then {
reject;
}
}
}

Configuring a Service Set

CLI Quick Configuration

To quickly define a service set, copy the following commands and paste them into the router terminal window:

[edit services]
set service-set bgf1-svc-set pgcp-rules bgf-rule1
set service-set bgf1-svc-set stateful-firewall-rules r1
set service-set bgf1-svc-set next-hop-service inside-service-interface sp-1/2/0.10
set service-set bgf1-svc-set next-hop-service outside-service-interface sp-1/2/0.20
set service-set bgf1-svc-set syslog host local-1 services any
set service-set bgf2-svc-set pgcp-rules bgf-rule2
set service-set bgf2-svc-set stateful-firewall-rules r1
set service-set bgf2-svc-set next-hop-service inside-service-interface sp-1/2/0.30
set service-set bgf2-svc-set next-hop-service outside-service-interface sp-1/2/0.40
set service-set bgf2-svc-set syslog host local-1 services any
set service-set bgf3-svc-set pgcp-rules bgf-rule3
set service-set bgf3-svc-set stateful-firewall-rules r1
set service-set bgf3-svc-set next-hop-service inside-service-interface sp-1/2/1.10
set service-set bgf3-svc-set next-hop-service outside-service-interface sp-1/2/1.20
set service-set bgf3-svc-set syslog host local-1 services any

Step-by-Step Procedure

To configure the service sets:

  1. Configure a service set for bgf-1.
    [edit services]
    user@sp-bgf-router#edit service-set bgf1-svc-set
    [edit services service-set bgf1-svc-set]
    user@sp-bgf-router#set pgcp-rules bgf-rule1
    user@sp-bgf-router#set stateful-firewall-rules r1
    user@sp-bgf-router#set next-hop-service inside-service-interface sp-1/2/0.10
    user@sp-bgf-router#set next-hop-service outside-service-interface sp-1/2/0.20
    user@sp-bgf-router#set syslog host local-1 services any
  2. Configure a service set for BGF-2.
    [edit services]
    user@sp-bgf-router#edit service-set bgf2-svc-set
    [edit services service-set bgf2-svc-set]
    user@sp-bgf-router#set pgcp-rules bgf-rule2
    user@sp-bgf-router#set stateful-firewall-rules r1
    user@sp-bgf-router#set next-hop-service inside-service-interface sp-1/2/0.30
    user@sp-bgf-router#set next-hop-service outside-service-interface sp-1/2/0.40
    user@sp-bgf-router#set syslog host local-1 services any
  3. Configure a service set for BGF-3.
    [edit services]
    user@sp-bgf-router#edit service-set bgf3-svc-set
    [edit services service-set bgf3-svc-set]
    user@sp-bgf-router#set pgcp-rules bgf-rule3
    user@sp-bgf-router#set stateful-firewall-rules r1
    user@sp-bgf-router#set next-hop-service inside-service-interface sp-1/2/1.10
    user@sp-bgf-router#set next-hop-service outside-service-interface sp-1/2/1.20
    user@sp-bgf-router#set syslog host local-1 services any

Configuration Results

Display the results of the configuration.

[edit services]
user@sp-bgf-router# show service-set bgf1-svc-set
syslog {
host local-1 {
services any;
}
}
stateful-firewall-rules r1;
pgcp-rules bgf-rule1;
next-hop-service {
inside-service-interface sp-1/2/0.10;
outside-service-interface sp-1/2/0.20;
}
[edit services]
user@sp-bgf-router# show service-set bgf2-svc-set
syslog {
host local-1 {
services any;
}
}
stateful-firewall-rules r1;
pgcp-rules bgf-rule2;
next-hop-service {
inside-service-interface sp-1/2/0.30;
outside-service-interface sp-1/2/0.40;
}
[edit services]
user@sp-bgf-router# show service-set bgf3-svc-set
syslog {
host local-1 {
services any;
}
}
stateful-firewall-rules r1;
pgcp-rules bgf-rule3;
next-hop-service {
inside-service-interface sp-1/2/1.10;
outside-service-interface sp-1/2/1.20;
}

Configuring QoS for Voice Calls

CLI Quick Configuration

To quickly configure a default value for the Differentiated Services (DiffServ) code point (DSCP), copy the following command and paste it into the router terminal window:

[edit services pgcp]
set gateway bgf-1 h248-properties diffserv dscp 1D

Step-by-Step Procedure

To configure default values for H.248 segmentation properties:

  1. Access the configuration of the H.248 DiffServ properties.
    [edit services pgcp gateway bgf-1]
    user@sp-bgf-router#edit h248-properties diffserv
  2. Configure a value for the DSCP.
    [edit services pgcp gateway bgf-1 h248-properties diffserv]
    user@sp-bgf-router#set dscp 1D

Configuration Results

Display the results of the configuration.

[edit services pgcp]
user@sp-bgf-router# show
dscp-value: '1D': must be 8 bits bit-string or hex value in the format 0xXX at '1D'
[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]