URL filtering configuration not working on MX480 with SPC3 card using logical-system. Customer had the below configuration.
Here URLF Client interface xe-0/0/2.35 is part of logical-system:
set logical-systems WIT-R1 interfaces xe-0/0/2 unit 35 vlan-id 35;
set logical-systems WIT-R1 interfaces xe-0/0/2 unit 35 family inet address x.x.x.x/30;
set services service-set WEB-FILTER-SET web-filter-profile WIT_WEB-FILTER
set services service-set WEB-FILTER-SET next-hop-service inside-service-interface ams1.10
set services service-set WEB-FILTER-SET next-hop-service outside-service-interface ams1.20
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering client-interfaces xe-0/0/2.35
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering server-interfaces xe-0/0/0.0
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering dns-source-interface xe-0/0/0.0
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering dns-routing-instance inet.0
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering client-routing-instance inet.0
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering dns-server y.y.y.y
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering dns-resolution-interval 60
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering dns-retries 5
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering url-filter-database wit-filter.txt
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering disable-url-ip-filtering
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering term 1 from src-ip-prefix x.x.x.x/32
set services web-filter profile WIT_WEB-FILTER url-filter-template WIT-Filtering term 1 then http-status-code 401
set interfaces ams1 load-balancing-options member-interface mams-5/0/0
set interfaces ams1 load-balancing-options member-interface mams-5/1/0
set interfaces ams1 unit 10 family inet
set interfaces ams1 unit 10 service-domain inside
set interfaces ams1 unit 20 family inet
set interfaces ams1 unit 20 service-domain outside
# set logical-systems VRF services service-sets
^
syntax error.
xe-0/0/2.35 interface is not exist in global instance.
When we try to configure URLF using SPC3 card, client and server-interfaces should be in the global instance.
We don't support MX-SPC3 on logical systems , and we cannot configure service-sets under logical-system.