virtual-offload (CSDS)
Syntax
virtual-offload {
interface name {
remote-ip ip-address;
source-identity profile-name;
}
source-identity-profile name {
family {
inet {
local-ip local-ip;
local-virtual-router local-virtual-router;
service-id service-id;
}
inet6 {
local-ip local-ip;
local-virtual-router local-virtual-router;
service-id service-id;
}
}
}
}Hierarchy Level
[edit security forwarding-options services-offload]
Description
Enable the firewall to process the control traffic on interfaces that carry real services. Use the statement on the firewall for the Connected Security Distributed Services (CSDS) architecture Express Path solution.
The interface on the router that connects to the firewall holds the load-balancing information required for the control traffic between the router and the firewall. On the firewall, create a source identification profile that includes the local IP address. You can also specify a local virtual router for the lo0 interface. Associate the profile to the designated interface and add the remote IP address. The firewall uses the incoming interface retrieve the tuple needed to exchange control packets between the firewall and the router.
Options
| virtual-offload |
Specify the option to use the virtual service-offload feature on the firewall. |
| interface name |
Specify the virtual service-offload interface to associate with the source identity profile. |
| remote-ip ip-address |
Specify the remote IP address. |
| source-identity profile-name |
Bind the source identity profile. |
| source-identity profile-name profile-name |
Specify the source identity profile name. |
| family |
Specify the protocol family—inet, inet6. |
| local-ip local-ip-address |
Specify the local IP address. |
| (Optional) local-virtual-router local-virtual-router |
Specify the local virtual router instance. |
| service-id service-id |
Specify the service-id.
|
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 25.4R1.