If you have service-set and service-filter, which one will get serviced first ?
set interfaces ge-1/0/0 unit 1 family inet service input service-set ss-nat service-filter nat-exclude-input set interfaces ge-1/1/0 unit 2 family inet service input service-set ss-nat service-filter nat-exclude-input set firewall family inet service-filter nat-exclude-input term rfc1918 from destination-address 10.0.0.0/8 set firewall family inet service-filter nat-exclude-input term rfc1918 from destination-address 172.16.0.0/12 set firewall family inet service-filter nat-exclude-input term rfc1918 from destination-address 192.168.0.0/16 set firewall family inet service-filter nat-exclude-input term rfc1918 then skip set firewall family inet service-filter nat-exclude-input term public from destination-prefix-list -public-nat-exclude set firewall family inet service-filter nat-exclude-input term public then skip set firewall family inet service-filter nat-exclude-input term default then service -- Regards, Vasanth R S _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
