Junos OS supports subscriber-aware services for the subscribers
belonging to a particular TDF domain through the configuration of
a subscriber-aware service set. The service set is assigned to the
TDF domain’s TDF interface (mif).
Before you configure the service set, complete
the following tasks:
Configure the service PIC for the service set.
Configure the TDF interface (mif).
Configure the PCEF profile at the [edit unified-edge
pcef] hierarchy level.
Configure any NAT rules or rule sets that you want to
apply.
To configure the subscriber-aware services for a TDF
domain’s subscribers:
- Configure a PCEF profile at the
[
services] hierarchy level by specifying a name for the
PCEF profile. This profile is a placeholder profile with no configuration
options, but it must be created.[edit services]
user@host# set pcef profile pcef-profile-name
- Configure an application identification
profile by specifying a name for the profile. This profile is a placeholder
profile with no configuration options, but it must be created.
[edit services application-identification]
user@host# set profile app-id-profile-name
- Configure an HTTP header enrichment
profile by specifying a name for the profile. This profile is a placeholder
profile with no configuration options, but it must be created.
[edit services hcm]
user@host# set profile hcm-profile-name
- Define a subscriber-aware service set.
[edit services]
user@host# set service-set service-set-name service-set-options subscriber-awareness
- Enable PCEF services for the service set. Use the profile
name that you configured in Step 1.
[edit services service-set service-set-name]
user@host# set pcef-profile pcef-profile-name
- Enable application identification for the service set.
Use the profile name that you configured in Step 2.
[edit services service-set service-set-name]
user@host# set application-identification-profile app-id-profile-name
- Enable HTTP header enrichment for the service set. Use
the profile name that you configured in Step 3.
[edit services service-set service-set-name]
user@host# set hcm-profile hcm-profile-name
- Specify NAT rules or rule-sets for the service set.
[edit services service-set service-set-name]
user@host# set ([nat-rules rule-name] | nat-rule-sets rule-set-name)
- Specify the services PIC interface on which the services
are performed.
[edit services service-set service-set-name]
user@host# set interface-service service-interface interface-name
The interface-name is amsn if you have redundancy configured and is ms-fpc/pci/0 if you do not have redundancy configured.
- Apply the service set to the TDF interface (mif) that
is part of the TDF domain.
[edit interfaces mif unit number family family service]
user@host# set input service-set service-set-name
user@host# set output service-set service-set-name
Note: The output service set for the mif is not used by the
MX Series router, but it must be configured so that the configuration
commit does not fail.
