[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring a Service Set

A service set allows you to combine directional rules, stateful firewall rules, CoS rules, and other rules that control the behavior of each service in the service set. We recommend you configure the PGCP service set as a next-hop service set that specifies the inside and outside logical service interfaces on the MultiServices PIC. You need to configure a service set for each PIC.

Step-by-Step Procedure

To configure a service set:

  1. Create a service set configuration.
    [edit services]
    user@host#edit service-set pgcp-svc-set
  2. Configure service set as a next-hop service set.
    [edit services service-set pgcp-svc-set]
    user@host#edit next-hop-service
  3. Specify the service interface to the inside network. The interface must be a logical interface on the same service PIC and must not be used by another service set. This unit number must match the unit number of the inside service domain configured in the service interface.
    [edit services service-set pgcp-svc-set next-hop-service]
    user@host#set inside-service-interface sp-1/2/0.10
  4. Specify the service interface to the outside network. The interface must be a logical interface on the same MultiServices PIC and must not be used by another service set. This unit number must match the unit number of the outside service domain configured in the service interface.
    [edit services service-set pgcp-svc-set next-hop-service]
    user@host#set outside-service-interface sp-1/2/0.20
  5. Specify the name of the PGCP rule or rule set that applies to this service set.
    [edit services service-set pgcp-svc-set]
    user@host#set pgcp-rules pgcp-rule-1
  6. Specify the name of the stateful firewall rule that applies to this service set.
    [edit services service-set pgcp-svc-set]
    user@host#set stateful-firewall-rules r1
  7. Specify the name of the CoS rule that applies to this service set.
    [edit services service-set pgcp-svc-set]
    user@host#set cos-rules cos-rule
  8. Configure logging for the service set.
    [edit services service-set pgcp-svc-set]
    user@host#edit syslog host local-1
    [edit services service-set pgcp-svc-set syslog host local-1]
    user@host#set services any

Related Topics

[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.