Example: Firewall Dynamic Profile

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

In this example, dynamic firewall is configured for subscriber access using user-defined variables and JUNOS internal variables.

The user-defined variables equate to RADIUS settings as follows:

User-Defined Variable Name	JUNOS Variable	RADIUS VSA Name	RADIUS Attribute Number	RADIUS Setting
inputFilterName	$inputFilterName	Ingress-Policy-Name	26–10	upstrm1
outputFilterName	$outputFilterName	Egress-Policy-Name	26–11	dnstrm1



variables {


inputFilterName {


radius {
vendor-id 4874 attribute 10;
}


}




outputFilterName {



radius {
vendor-id 4874 attribute 11;
}


}


}


interfaces {


demux0 {


unit "$junos-interface-unit" {


demux-options {
underlying-interface "$junos-underlying-interface";
}




family inet {


demux-source {
$junos-subscriber-ip-address;
}




filter {
input "$inputFilterName";
output "$outputFilterName";
}


unnumbered-address lo0.0 preferred-source-address 20.21.0.1;
}


}


}


}

Note: You must also configure any global firewall parameters.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]