Junos Enterprise Routing, 2nd Edition

Layer 3 Services Configuration

The first step when configuring Layer 3 services on your router is to enable the hardware for those services. If the ASP or Multiservices PIC is used, you must specify the layer of service as either Layer 2 or Layer 3:

lab@sake# set chassis fpc 1 pic 2 adaptive-services service-package ?
Possible completions:
  layer-2              Layer 2 service package
  layer-3              Layer 3 service package
[edit]

lab@sake# show chassis hardware
Hardware inventory:
Item          Version Part number Serial number Description
Chassis                           A1609         M7i
Midplane       REV 04 710-008761  CR6773        M7i Midplane
Power Supply 1 Rev 06 740-008537  6039089       AC Power Supply
Routing Engine REV 01 740-011202  1000618737    RE-850
CFEB           REV 08 750-010464  CR5380        Internet Processor II
FPC 0                                           E-FPC
  PIC 0        REV 11 750-002992  CT2202        4x F/E, 100 BASE-TX
  PIC 2        REV 08 750-005724  CR1650        2x OC-3 ATM-II IQ, MM
FPC 1                                           E-FPC
  PIC 2        REV 07 750-009487  CP5197        ASP - Integrated
  PIC 3        REV 10 750-009098  CR4858        2x F/E, 100 BASE-TX

The ASM, MX series, and J-series routers do not contain this limitation and can support both types of services concurrently. The main building block when configuring Junos services is called a service set, which is a list of service interfaces, service types, and service rules applied to either an interface or a routing next hop. A service set can contain one type of Layer 3 service or a grouping of services such as NAT, IDS, and stateful firewall. If an IPSec VPN is required, you must place it in its own unique service set.

To match ...