Technical Documentation

Examples: Configuring Services Interfaces

Apply the my-service-set service set on an interface-wide basis. All traffic that is accepted by my_input_filter has my-input-service-set applied to it. After the service set is applied, additional filtering is done using the my_post_service_input_filter filter.

[edit interfaces fe-0/1/0]unit 0 {family inet {filter {input my_input_filter;output my_output_filter;}service {input {service-set my-input-service-set;post-service-filter my_post_service_input_filter;}output {service-set my-output-service-set;}}}}

Configure two redundancy interfaces, rsp0 and rsp1, and associated services.

[edit interfaces]rsp0 {redundancy-options {primary sp-0/0/0;secondary sp-1/3/0;}unit 0 {family inet;}unit 30 {family inet;service-domain inside;}unit 31 {family inet;service-domain outside;}}rsp1 {redundancy-options {primary sp-0/1/0;secondary sp-1/3/0;}unit 0 {family inet;}unit 20 {family inet;service-domain inside;}unit 21 {family inet;service-domain outside;}}[edit services]service-set null-sfw-with-nat {stateful-firewall-rules allow-all;nat-rules rule1;next-hop-service {inside-service-interface rsp0.30;outside-service-interface rsp0.31;}}[edit routing-instances]vpna {interface rsp0.0;}

Published: 2010-04-28