How to Configure Services Interfaces for Next Gen Services
To configure services interfaces:
- Configure the services interface name.
[edit] user@host# set interfaces interface-name
Where the interface-name one of the following:
vms-slot-number/pic-number/port-number for an MX-SPC3 services card
si-slot-number/pic-number/0 for a line card PFE (inline services interface)
- Configure the unit and family for the interface.
- If you are using the services interface in an interface
service set:
[edit] user@host# set interfaces interface-name unit logical-unit-number family (inet | inet6)
- If you are using the services interface in a next-hop
service set, configure inside and outside interface units:
[edit] user@host# set interfaces interface-name unit logical-unit-number family (inet | inet6) user@host# set interfaces interface-name unit logical-unit-number service-domain inside user@host# set interfaces interface-name unit logical-unit-number family (inet | inet6) user@host# set interfaces interface-name unit logical-unit-number service-domain outside
For example:
[edit] user@host# set interfaces vms-1/0/0 unit 100 family inet user@host# set interfaces vms-1/0/0 unit 100 service-domain inside user@host# set interfaces vms-1/0/0 unit 1000 family inet user@host# set interfaces vms-1/0/0 unit 1000 service-domain outside
- If you are using the services interface in an interface
service set:
- When neither NAT nor the
max-sessions-per-subscriberstatement at the[edit service-set service-set-name service-set-options]hierarchy level are configured, enable the creation of subscribers if you want to track subscribers.[edit interfaces interface-name services-options] user@host# set enable-subscriber-analysis
- Configure CPU resource restrictions for the services interface.
[edit interfaces interface-name services-options session-limit] user@host# set cpu-load-threshold percentage
When the CPU usage exceeds the value (percentage of the total available CPU resources), the system reduces the rate of new sessions so that the existing sessions are not affected by low CPU availability. The CPU utilization is constantly monitored, and if the CPU usage remains above the configured
cpu-load-thresholdvalue for a continuous period of 5 seconds, Junos OS reduces the session rate value configured atedit interfaces interface-name services-options session-limit rateby 10%. This is repeated until the CPU utilization comes down to the configured limit. - Configure the maximum number of sessions allowed simultaneously
on a services card.
[edit interfaces interface-name services-options session-limit] user@host# set maximum number
If you specify the maximum number of sessions to be zero, it indicates that the configuration is not effective. You must specify a value higher than zero for the maximum number of sessions.
- Configure the maximum number of new sessions allowed per
second on a services card.
[edit interfaces interface-name services-options session-limit] user@host# set rate rate