• Downloads
• Dynamically Attaching Filters Using RADIUS Variables    

• Related Topics
• Classic Filters Overview
• Dynamically Attaching Statically Created Filters
• For more information about JUNOS default groups, see the JUNOS CLI User Guide
• For more information about firewall filters, see the JUNOS Policy Framework Configuration Guide

Dynamically Attaching Filters Using RADIUS Variables

You can attach filters to static interfaces by using dynamic profiles. By specifying a variable for the input and output filters, the dynamic profile uses RADIUS VSA attributes for ingress and egress policy.

RADIUS VSA	Attribute Name	Variable
26–10	ingress-policy-name	$junos-input-filter
26–11	egress-policy-name	$junos-output-filter

Before you can attach a filter using RADIUS.

1. Create a basic dynamic profile.

   See Configuring a Basic Dynamic Profile.

2. Ensure that RADIUS ingress and egress policies are configured appropriately.

   See Configuring RADIUS Server Parameters for Subscriber Access

To dynamically attach input and output filters using RADIUS:

1. Specify the input filter variable in the dynamic profile.

   [edit dynamic-profiles access-profile interfaces ge-1/1/1 unit 1 family inet]

   user@host# set filter input $junos-input-filter

2. Specify the output filter variable in the dynamic profile.

   [edit dynamic-profiles access-profile interfaces ge-1/1/1 unit 1 family inet]

   user@host# set filter output $junos-output-filter