Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

static-subscriber-application

Syntax

Hierarchy Level

Description

Apply advanced services, such as deep packet inspection, to static subscribers configured under a dynamic profile. Static subscribers are supported on GE, AE, and PS logical interfaces over LT interfaces.

To configure advanced services for static subscribers, in addition to the static-subscriber-application statement, you must also configure the:

  • access-profile, dynamic-profile, authentication, and the interface statements at the [edit system services static-subscribers group] hierarchy level. You configure a demux interface for the group.
  • Demux interface and the GE, AE, or PS interface at the [edit interfaces] hierarchy level.
  • profile statement at both the [edit services hcm] and [edit services pcef] hierarchy levels.
  • service-set statement at the [edit services] hierarchy level. Be sure to configure the hcm-profile, pcef-profile, and the interface-service statements. For the interface-service statement, configure the ms- or ams- interface name.
  • service-filter statement at the [edit firewall family (inet|inet6)] hierarchy level.
  • dynamic-profiles statement at the [edit] hierarchy level, making sure to include the service-set and service-filter for each family on an interface, and configure the PCEF profile name on the pcef statement at the [edit dynamic-profiles name interfaces name unit number] hierarchy level.

Additional Information

To verify that the services have been applied to the static subscriber, use these operational-mode commands:

  • show services pcef subscriber (terse|extensive)
  • show services pcef pic fpc-shot-number pic-slot-number
  • show subscriber extensive

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 21.2R1.