Configuring Service Sets For Network Address Translation - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide

Configuring Service Sets for Network Address Translation

1030
Configuring Service Sets for Network Address Translation on page 1030
Configuring Service Sets to Be Applied to Services Interfaces on page 1031
Configuring Queuing and Scheduling on Inline Services Interface on page 1040
When configuring a service set for Network Address Translation (NAT) processing, make
sure you have defined:
Service interfaces for handling inbound and outbound traffic
A NAT rule or rule set
NOTE: Prior to Junos OS Release 11.4R3, you could use a source NAT pool
only in a single service set. In Junos OS Release 11.4R3 and subsequent
releases, you can reuse a source or destination NAT pool in multiple service
sets, provided that the service interfaces associated with the service sets are
in different virtual routing and forwarding (VRF) instances.
For interface-style service sets, when a NAT pool is reused in multiple
service sets, the service interfaces used in the
service-interface
For next-hop-style service sets, when a NAT pool is reused in multiple
service sets, the service interfaces used in the
each service set must be in different VRFs.
Not adhering to these service interface restrictions causes multiple routes
to be installed in the same VRF for the same NAT addresses, thereby causing
reverse traffic to be processed incorrectly.
To enable sharing of source NAT pools, include the
allow-overlapping-nat-pools
level.
To configure a NAT service set:
At the hierarchy level, define the service set.
1. [edit services]
[edit services]
user@host# edit service-set service-set-name
Configure either an interface service, which requires a single service interface, or a
2.
next-hop service, which requires an inside and outside service interface.
[edit services service-set service-set-name]
user@host# set interface-service service-interface interface-name
Or
option of each service set must be in different VRFs.
statement at the
Copyright © 2017, Juniper Networks, Inc.
interface-service
option of
outside-interface
[edit services nat] hierarchy