Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Dynamically Attaching Filters Using RADIUS Variables

You can attach filters to static interfaces by using dynamic profiles. By specifying a variable for the input and output filters, the dynamic profile uses RADIUS VSA attributes for ingress and egress policy.

RADIUS VSA

Attribute Name

Variable

26–10

Ingress-Policy-Name

$junos-input-filter

26–11

Egress-Policy-Name

$junos-output-filter

26–106

IPv6-Ingress-Policy-Name

$junos-input-ipv6-filter

26–107

IPv6-Egress-Policy-Name

$junos-output-ipv6-filter

26–191

Input-Interface-Filter

$junos-input-interface-filter

26–192

Output-Interface-Filter

$junos-output-interface-filter

To dynamically attach IPv4 input and output filters using RADIUS:

  1. Specify the dynamic profile you want to attach, the interface, the logical unit number, and family inet.
  2. Specify the IPv4 input filter variable in the dynamic profile.
  3. Specify the IPv4 output filter variable in the dynamic profile.

To dynamically attach IPv6 input and output filters using RADIUS:

  1. Specify the dynamic profile you want to attach, the interface, the logical unit number, and family inet6.

  2. Specify the IPv6 input filter variable in the dynamic profile.

  3. Specify the IPv6 output filter variable in the dynamic profile.

To dynamically attach input and output filters to any interface independent of protocol using RADIUS:

  1. Specify the dynamic profile you want to attach, the interface, and the logical unit number.

  2. Specify the input filter variable that applies to all families configured for the logical interface.

  3. Specify the output filter variable that applies to all families configured for the logical interface.

Related Documentation