Dynamically Attaching Filters Using RADIUS Variables

You can attach filters to static interfaces by using dynamic profiles. By specifying a variable for the input and output filters, the dynamic profile uses RADIUS VSA attributes for ingress and egress policy.

Before you can attach a filter using RADIUS.

1. Create a basic dynamic profile.

   See Configuring a Basic Dynamic Profile.

2. Ensure that RADIUS ingress and egress policies are configured appropriately.

   See Configuring RADIUS Server Parameters for Subscriber Access

To dynamically attach input and output filters using RADIUS:

1. Specify the input filter variable in the dynamic profile.

   [edit dynamic-profiles access-profile interfaces ge-1/1/1 unit 1 family inet]

   user@host# set filter input $junos-input-filter

2. Specify the output filter variable in the dynamic profile.

   [edit dynamic-profiles access-profile interfaces ge-1/1/1 unit 1 family inet]

   user@host# set filter output $junos-output-filter

Related Topics

• Guidelines for Creating and Applying Filters for Subscriber Interfaces
• Dynamically Attaching Statically Created Filters
• For more information about JUNOS default groups, see the JUNOS CLI User Guide
• For more information about firewall filters, see the Policy Framework Configuration Guide