APE@MX104-1# show services { service-set SRC-DST_NAT_SS { allow-multicast; nat-rules SRC-DST_NAT; next-hop-service { inside-service-interface ms-0/0/0.5; outside-service-interface ms-0/0/0.6; } } nat { pool new_dest { address 172.16.126.18/32; } pool new_source { address 172.18.126.1/32; } rule SRC-DST_NAT { match-direction input; term T1 { from { source-address { 172.16.126.1/32; } } then { translated { source-pool new_source; inactive: destination-pool new_dest; translation-type { basic-nat44; } } syslog; } } } } } interfaces { ge-0/2/0 { description "TO B02 p3"; unit 0 { family inet { filter { input IN_ge-0/2/0; } address 172.16.126.2/29; } } } ge-0/2/1 { description "To MX80 ge-1/1/0"; unit 0 { family inet { address 192.168.13.1/30; } family mpls; } } ge-0/2/2 { description "TO MX104-2 ge-0/2/2"; speed 1g; gigether-options { no-auto-negotiation; } unit 0 { family inet { address 192.168.12.1/30; } family mpls; } } lo0 { unit 0 { family inet { address 10.101.1.1/32; } } inactive: unit 168 { family inet { address 192.168.168.1/32; } } } ms-0/0/0 { unit 0 { family inet; } unit 1 { family inet; service-domain inside; } unit 2 { family inet; service-domain outside; } unit 3 { family inet; service-domain inside; } unit 4 { family inet; service-domain outside; } unit 5 { family inet { filter { input IN_ms-0/0/0.5; output OUT_ms-0/0/0.5; } } service-domain inside; } unit 6 { family inet { filter { input IN_ms-0/0/0.6; output OUT_ms-0/0/0.6; } } service-domain outside; } } } firewall { family inet { filter IN_ge-0/2/0 { term T1 { then { count IN_ge-0/2/0; log; accept; } } } filter IN_ms-0/0/0.5 { term T1 { then { count IN_ms-0/0/0.5; log; accept; } } } filter OUT_ms-0/0/0.6 { term T1 { then { count OUT_ms-0/0/0.6; log; accept; } } } filter IN_ms-0/0/0.6 { term T1 { then { count IN_ms-0/0/0.6; log; accept; } } } filter OUT_ms-0/0/0.5 { term T1 { then { count OUT_ms-0/0/0.5; log; accept; } } } } } routing-instances { M-VPN { instance-type vrf; routing-options { multicast { ssm-groups 239.0.0.0/14; } } protocols { mvpn; pim { interface ms-0/0/0.6; } } interface ms-0/0/0.6; route-distinguisher 10.101.1.1:111; vrf-target target:65000:111; vrf-table-label; provider-tunnel { rsvp-te { label-switched-path-template { default-template; } } } } SRC-DST1-VR { instance-type virtual-router; routing-options { static { route 0.0.0.0/0 next-hop ms-0/0/0.5; } } interface ge-0/2/0.0; interface ms-0/0/0.5; } } routing-options { router-id 10.101.1.1; autonomous-system 65000; } protocols { bgp { group RR-TO-CLIENT { type internal; local-address 10.101.1.1; family inet-vpn { unicast; } family l2vpn { signaling; } family inet-mvpn { signaling; } cluster 10.101.1.1; neighbor 10.101.2.2; neighbor 10.101.3.3; neighbor 10.101.4.4; } peer-as 65000; local-as 65000; } ldp { interface ge-0/2/2.0; interface ge-0/2/1.0; } mpls { interface ge-0/2/2.0; interface ge-0/2/1.0; } ospf { traffic-engineering; area 0.0.0.0 { interface ge-0/2/2.0 { interface-type p2p; } interface ge-0/2/1.0 { interface-type p2p; } interface lo0.0 { passive; } } } rsvp { interface ge-0/2/2.0; interface ge-0/2/1.0; } }