Understanding Service Sets - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Release History Table
Related
Documentation

Understanding Service Sets

1028
Table 64: IP Option Values (continued)
IP Option Name
ip-stream
loose-source-route
route-record
router-alert
strict-source-route
timestamp
Release Description
17.1 accept skip-ids
but IDS rule processing configured on an MS-MPC is skipped.
Junos Network Secure Overview on page 1020
Configuring Protection Against Network Attacks on an MS-MPC or MS-MIC
Junos OS for ACX Series routers enables you to create service sets that define a collection
of services to be performed by an inline services interface. You can configure the service
set either as an interface-style service set or as a next-hop-style service set.
An interface-style service set is used as an action modifier across an entire interface. You
can use an interface-style service set when you want to apply services to packets passing
through an interface.
A next-hop-style service set is a route-based method of applying a particular service.
Only packets destined for a specific next hop are serviced by the creation of explicit static
routes. This configuration is useful when services need to be applied to an entire virtual
routing and forwarding (VRF) table, or when routing decisions determine that services
need to be performed. When a next-hop-style service is configured, the services interface
is considered to be a two-legged module with one leg configured to be the inside interface
(inside the network) and the other configured as the outside interface (outside the
network).
To configure service sets for NAT services, include the
services] hierarchy level:
[edit services]
Numeric
Value Comment
136 –
131 –
7 –
148 –
137 –
68 –
—The packet is accepted and sent on to its destination,
service-set
Copyright © 2017, Juniper Networks, Inc.
statement at the
[edit