How to Configure Interface-Style Service Sets for Next Gen Services
To configure an interface service set:
- Configure the service set name.
[edit services] user@host# edit service-set service-set-name
- Specify the service interface that the service set uses
to apply services.
[edit services service-set service-set-name] user@host# set interface-service service-interface interface-name
- Specify the service rules that the service set applies
to traffic.
For example:
[edit services service-set ss1] user@host# set nat-rule-sets internal-nat
- (Optional) Enable the service set to process unidirectional
traffic.
[edit services service-set service-set-name service-set-options] user@host# set enable-asymmetric-traffic-processing
- Enable service-processing at routing engine (RE).
[edit services service-set service-set-name service-set-options] user@host# set routing-engine-services
- Apply the service set to an interface that is passing
traffic. You can apply a service filter to apply the service set to
only certain traffic on the interface.
[edit interfaces interface-name unit logical-unit-number family (inet | inet6) service] user@host# set (input | output) service-set service-set-name <service-filter filter-name>
For details about configuring the service-filter, see Guidelines for Configuring Service Filters.
The
inputoption applies the service set to the input side of the interface, and theoutputoption applies the service set to the output side of the interface. If you are using a bidirectional service rule in the service set, then the same service set must be used for input and output.