The first step when configuring Layer 3 services on your router is to enable the hardware for those services. If the ASP or Multiservices PIC is used, you must specify the layer of service as either Layer 2 or Layer 3:
set chassis fpc 1 pic 2 adaptive-services service-package ?Possible completions: layer-2 Layer 2 service package layer-3 Layer 3 service package  lab@sake#
show chassis hardwareHardware inventory: Item Version Part number Serial number Description Chassis A1609 M7i Midplane REV 04 710-008761 CR6773 M7i Midplane Power Supply 1 Rev 06 740-008537 6039089 AC Power Supply Routing Engine REV 01 740-011202 1000618737 RE-850 CFEB REV 08 750-010464 CR5380 Internet Processor II FPC 0 E-FPC PIC 0 REV 11 750-002992 CT2202 4x F/E, 100 BASE-TX PIC 2 REV 08 750-005724 CR1650 2x OC-3 ATM-II IQ, MM FPC 1 E-FPC PIC 2 REV 07 750-009487 CP5197 ASP - Integrated PIC 3 REV 10 750-009098 CR4858 2x F/E, 100 BASE-TX
The ASM and J-series routers do not contain this limitation and can support both types of services concurrently. The main building block when configuring JUNOS software services is called a service set, which is a list of service interfaces, service types, and service rules applied to either an interface or a routing next hop. A service set can contain one type of Layer 3 service or a grouping of services such as NAT, IDS, and stateful firewall. If an IPSec VPN is required, you must place it in its own unique service set.
To match which ...