SDX Services for JUNOS Routing Platforms
You can use the SDX software to apply stateful firewalls, network address translation (NAT), and bandwidth on demand (BoD) to traffic on JUNOS routing platforms. The service provider uses services and policies in the SDX directory to manage traffic on a JUNOS routing platform. IT managers in enterprises that are customers of the service provider subscribe to these services through the Enterprise Manager portal.
Use the directory structure in the sample data to organize services and policies for JUNOS routing platforms. The services for JUNOS routing platforms are located in l=entJunos, o=Scopes, o=umc. The policies for JUNOS routing platforms are located in ou=entJunos, o=Policies, o=umc.
The directory structure in the sample data uses the service scope called entJunos to contain the services for JUNOS routing platforms. Use of this service scope allows subscribers who connect to a JUNOS routing platform to see only the services available for that router and not the services that are available on JUNOSe routers. For more information about service scopes, see SDX Objects Guide, Chapter 1, Managing Services.
Some of the services and policies for JUNOS routing platforms are defined in the sample data and require little or no customization. You can, however, create some new services and policies, such as those for BoD.
Each subscription to a service on a JUNOS routing platform has a priority. A subscription with a lower priority setting takes precedence over a subscription with a higher priority setting. The SAE uses the priorities to determine the order in which it applies subscriptions to a particular type of service to traffic. For example, if the same traffic is affected by subscriptions to several firewall services, the SAE applies those subscriptions in a prioritized order. Priorities of different types of service are independent of each other; for example, priorities of NAT services are independent of BoD services.
Depending on the type of service, you must specify either an explicit priority or a range of priorities in the service or the policy rules. When you specify a range of priorities, the IT manager selects an explicit priority in this range through the Enterprise Manager portal. The sample data includes definitions of priorities for each type of service; however, you can modify the priorities if you want to provide a different ranges of priorities.
For general information about configuring services and policies, see SDX Objects Guide, Chapter 1, Managing Services and SDX Objects Guide, Chapter 5, Configuring and Managing Policies. For specific information about configuring policies and services for JUNOS routing platforms, see: