Example: Firewall Dynamic Profile
In this example, dynamic firewall is configured for subscriber access using Junos IPv4 predefined variables.
The predefined variables equate to RADIUS settings as follows:
Junos OS Predefined Variable |
RADIUS VSA Name |
RADIUS Attribute Number |
|---|---|---|
$junos-input-filter |
Ingress-Policy-Name |
26–10 |
$junos-output-filter |
Egress-Policy-Name |
26–11 |
dynamic-profiles {
DynamicFilterProfile {
interfaces {
“$junos-interface-ifd-name” {
unit “$junos-underlying-interface-unit” {
family inet {
filter {
input “$junos-input-filter”;
output “$junos-output-filter”;
}
}
}
}
}
}
}
Note:
You must also configure any global firewall parameters.