Navigation
Supported Platforms
Guidelines for Creating and Applying Parameterized Filters for Subscriber Interfaces
This release supports the dynamic configuration of firewall filters. However, you can also continue to create static firewall filters for interfaces as you do normally, and then dynamically apply those filters to statically created interfaces using dynamic profiles. You can also use dynamic profiles to attach input and output filters through RADIUS.
When creating and applying filters, keep the following in mind:
- This release supports dynamic application of only input and output filters.
- The filters must be interface-specific.
- You can create family-specific inet and inet6 filters.
- You can create interface-specific filters at the unit level that apply to any family type (inet or inet6) configured on the interface.
- You can add or remove both IPv4 and IPv6 filters with the same service activation or deactivation.
- You can remove one filter type without impacting the other type of filter. For example, you can remove IPv6 filters and leave the current IPv4 filters active.
- You can chain up to five input filters and four output filters together.
- If you do not configure and apply a filter, the interface uses the default group filter configuration.
- You cannot modify a firewall filter while subscribers on the same logical interface are bound.
