Dynamically Attaching Filters Using RADIUS Variables

You can attach filters to static interfaces by using dynamic profiles. By specifying a variable for the input and output filters, the dynamic profile uses RADIUS VSA attributes for ingress and egress policy.

1. Create a basic dynamic profile.

   See Configuring a Basic Dynamic Profile.

2. Ensure that RADIUS ingress and egress policies are configured appropriately.

   See Configuring RADIUS Server Parameters for Subscriber Access.

1. Specify the dynamic profile you want to attach, the interface, the logical unit number, and family inet.
   [edit] user@host# edit dynamic-profiles myProfile interface ge-1/1/1 unit 1 family inet
2. Specify the IPv4 input filter variable in the dynamic profile.
   [edit dynamic-profiles myProfile interfaces ge-1/1/1 unit 1 family inet] user@host# set filter input $junos-input-filter
3. Specify the IPv4 output filter variable in the dynamic profile.
   [edit dynamic-profiles myProfile interfaces ge-1/1/1 unit 1 family inet] user@host# set filter output $junos-output-filter

1. Specify the dynamic profile you want to attach, the interface, the logical unit number, and family inet6.
   [edit] user@host# edit dynamic-profiles myProfile interface ge-1/1/1 unit 1 family inet6
2. Specify the IPv6 input filter variable in the dynamic profile.
   [edit dynamic-profiles myProfile interfaces ge-1/1/1 unit 1 family inet6] user@host# set filter input $junos-input-ipv6-filter
3. Specify the IPv6 output filter variable in the dynamic profile.
   [edit dynamic-profiles myProfile interfaces ge-1/1/1 unit 1 family inet6] user@host# set filter output $junos-output-ipv6-filter