Hi Please share the firewall filter configuration. /ET
On 9/27/13 2:14 PM, "Catalin Petrescu" <[email protected]> wrote: >I have a dynamic profile for static subscribers configure as below: > >root@MX240-1-R6# show dynamic-profiles 9 >interfaces { > "$junos-interface-ifd-name" { > unit "$junos-underlying-interface-unit" { > family inet { > filter { > input "$junos-input-filter"; > output "$junos-output-filter"; > } > } > } > } >} > >root@MX240-1-R6# show system services static-subscribers >access-profile { > sbr; >} >dynamic-profile { > 9; >} >authentication { > password "$9$At-bp1RcylMLx"; ## SECRET-DATA > username-include { > interface; > } >} >group IP1 { > interface demux0.1; >} > >The user is authenticated and the filter are activated but only input >works. > >root@MX240-1-R6> show subscribers >Interface IP Address/VLAN ID User Name > LS:RI >demux0.1 100.100.100.6 demux0.1 > default:default > >root@MX240-1-R6> show firewall > >ilter: 2M-demux0.1-in >Counters: >Name Bytes > Packets >2M-demux0.1-in 1596 >19 > >Filter: 5M-demux0.1-out >Counters: >Name Bytes > Packets >5M-demux0.1-out 0 > 0 > > >output counters is always 0. > >No idea why this is happening , with dynamic clients with dhcp output >filter is working. > > >Many thanks, > >Catalin Petrescu >_______________________________________________ >juniper-nsp mailing list [email protected] >https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
