Technical Documentation

Example: Firewall Dynamic Profile

In this example, dynamic firewall is configured for subscriber access using JUNOS IPv4 predefined variables.

The predefined variables equate to RADIUS settings as follows:

JUNOS Predefined Variable

RADIUS VSA Name

RADIUS Attribute Number

$junos-input-filter

Ingress-Policy-Name

26–10

$junos-output-filter

Egress-Policy-Name

26–11

dynamic-profiles {DynamicFilterProfile {interfaces {“$junos-interface-ifd-name” {unit “$junos-underlying-interface-unit” {family inet {filter {input “$junos-input-filter”;output “$junos-output-filter”;}}}}}}}

Note: You must also configure any global firewall parameters.


Published: 2010-04-15