Technical Documentation

Applying the Service Set to a Services Interface

In the interface that you configured for your BSG, you need to add the IDP and stateful firewall service set.

You can apply the service set to traffic received on the interface (input) and to traffic transmitted on the interface (output). However, for service sets with bidirectional service rules, you must include the same service set in both the input and output directions.

To apply the service set to a service interface:

  1. Enter edit mode for the service interface.
    [edit]user@host# edit interfaces ms-0/0/0
  2. Configure a logical unit and the protocol family and enter edit mode for the logical unit.
    [edit interfaces ms-0/0/0]user@host# edit unit 0 family inet
  3. Apply the service set to the input and output directions on the interface.
    [edit interfaces ms-0/0/0 unit 0 family inet]user@host# set service input service-set IPS-FW user@host# set service output service-set IPS-FW

Published: 2010-04-13