Example: Firewall Dynamic Profile

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

In this example, dynamic firewall is configured for subscriber access using user-defined variables and JUNOS predefined variables.

The user-defined variables equate to RADIUS settings as follows:

User-Defined Variable Name	JUNOS Variable	RADIUS VSA Name	RADIUS Attribute Number	RADIUS Setting
inputFilterName	$inputFilterName	Ingress-Policy-Name	26–10	upstrm1
outputFilterName	$outputFilterName	Egress-Policy-Name	26–11	dnstrm1


            
               variables {
               
                  
                     inputFilterName {
                     
                        
                           radius {
                           vendor-id 4874 attribute 10;
                           }
                        
                     
                     }
                  
               
               
                  
                     outputFilterName {
                     
                     
                        
                           radius {
                           vendor-id 4874 attribute 11;
                           }
                        
                     
                     }
                  
               
               }
               
                  
                     interfaces {
                     
                        
                           demux0 {
                           
                              
                                 unit "$junos-interface-unit" {
                                 
                                    
                                       demux-options {
                                       underlying-interface "$junos-underlying-interface";
                                       }
                                    
                                 
                                 
                                    
                                       family inet {
                                       
                                          
                                             demux-source {
                                             $junos-subscriber-ip-address;
                                             }
                                          
                                       
                                       
                                          
                                             filter {
                                             input "$inputFilterName";
                                             output "$outputFilterName";
                                             }
                                          
                                       
                                       unnumbered-address lo0.0 preferred-source-address 20.21.0.1;
                                       }
                                    
                                 
                                 }
                              
                           
                           }
                        
                     
                     }

Note: You must also configure any global firewall parameters.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]