Configuring a Subscriber Interface Service

Before you configure a subscriber interface service, read the overview of services to be used for policy-based routing. See Defining Services for Policy-Based Routing on JUNOSe Routers .

To configure the subscriber interface service:

1. Configure a policy to direct subscriber traffic entering a subscriber interface to an IDP sensor.

   We recommend that you use a next-hop policy rule to route traffic sent by subscribers to the IP address of the IDP sensor. Depending on your network configuration you can also route traffic to a system interface that then routes traffic to the IDP sensor, or you can specify a substitution to indicate the IP address of the IDP sensor.

   For a sample policy group see policyGroupName=policyRouteSubscriberToIdp, ou=idp, o=Policies, o=umc in the sample data.

2. In SDX Admin in the JUNOSe scope, create a service, set the type to normal, and specify the policy group configured in Step 1.

   For a sample subscriber interface service, see serviceName=SubrIntfFragment, o=IDP-JunosePop, o=Scopes, o=umc in the sample data.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.