Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Modifying the Association of SDG Details and Service Components for a Packet Filter Policy


From the Policy & Filters page, which displays all the previously configured packet filters, you can modify the components or the parameter types that are associated with a particular service filter. You must lock the packet filters for which you want to modify the attached rule term components or attributes before you can update the settings. You can also select a different SDG to which the packet filter must be applied.

To modify the association of SDGs and the rule term component for a packet filter, such as a stateless firewall filter:

  1. From the View selector, select Service View. The workspaces that are applicable to edge services are displayed.
  2. Select All Network from the Service View pane. You can modify the association of SDGs with service policies, only if you select the All Network label in the View pane. If you expand the All Network tree and select an SDG group or an SDG in a redundancy pair, you cannot modify the association of service policies and rules with SDGs in a single-shot, one-step operation.
  3. From the Junos Space user interface, click the Deploy icon on the Edge Services Director banner.

    The functionalities that you can configure in this mode are displayed in the task pane.
  4. From the View pane, select the All Network item in Gateway view. Click the plus sign (+) beside the All Network item in the View pane to expand the tree and select the device node you want.
  5. Select Policy & Filters from the task pane.

    The Services page is displayed.

  6. Click the down arrow next to Policy & Filters to expand the tree in the task pane and view the list of filter templates.

    Select Packet Filter to open the Service Edit > Packet Filter page on the right pane.

    Figure 1: Enhanced Edit Page for Packet Filters
    Enhanced Edit Page for Packet Filters

    The following fields are displayed on this page:

    Table 1: Service Edit > Packet Filter Page



    Instance Name

    Name of the configured service template instance

    OS Version

    Junos OS release number that represents a particular revision of the software that runs on a Juniper Networks routing platform, for example, Junos OS Release 8.5, 9.1, or 9.2. Each Junos OS release has certain new features that complement the software processes that support Internet routing protocols, control the device’s interfaces and the device chassis itself, and allow device system management.

    Group Name

    Name of the SDG group

    Reference Host

    Hostname of the SDG with which the service instance is associated.

    Deployment Plans

    Name of the deployment plan with which the service template is attached.

  7. From the Term Name drop-down list, select the rule term with which the packet filter must be applied.
  8. From the Host Name drop-down list, select the hostname of the SDG.
  9. In the Select Common Components section, select the check boxes beside the service modules or components, such as packet filters, SFW rules, or CGNAT rules, that are displayed. The displayed components depend on the attributes that are previously defined for that selected packet filter. For example, if the service policy is for stateful firewall, SFW rules and SFW rule sets are shown. Select the check box beside Config Category to select all the service components.

    The modified association is saved.

You can use the Actions menu in the Service Template pages for packet filters to publish, unpublish, export, and restore the defined polices or filters. For details, see Using the Actions Menu in the Service Template Page.