Configuring a Service Set
A service set lets you combine rules for different services into one set and then apply the set of services to a service interface pool on a MultiServices PIC or MS-DPC. You need to configure a service set for each PIC or DPC.
In this case, we are creating a service set that does the following:
- Combines the stateful firewall and BGF rules to be used on the PIC. The BGF rule is the rule that associates the virtual BGF with a NAT pool.
- Applies the combined rules to a service interface pool on the MultiServices PIC or MS-DPC that was created for the BGF service.
- Defines a location and logging level for the service set.
To configure a service set:
- Create a service set configuration. [edit services]user@host# edit service-set bgf-svc-set
- Specify the name of the BGF rule or rule
set that applies to this service set. [edit services service-set bgf-svc-set]user@host# set pgcp-rules bgf-rule-1
- Specify the name of the stateful firewall
rule that applies to this service set. [edit services service-set bgf-svc-set]user@host# set stateful-firewall-rules r1
- Configure the service set as a next-hop
service set. [edit services service-set bgf-svc-set]user@host# edit next-hop-service
- Specify the service interface pool that
provides interfaces to the inside and outside networks. This is the
service interface pool you configured to provide inside and outside
service domains on the MultiServices PIC or MS DPC that you configured
for the BGF.[edit services service-set bgf-svc-set next-hop-service]user@host# set service-interface-pool int-pool-1
- Configure a location and logging level
for the service set. [edit services service-set bgf-svc-set]user@host# edit syslog host local-1
[edit services service-set bgf-svc-set syslog host local-1]user@host# set services any
Related Topics
- Service Set Configuration Guidelines in Junos Services Interfaces Configuration Guide
