Dell PowerConnect J-EX4200-24T Software Manual page 2371

Table 294: Components of the Firewall Filter and RADIUS Server Attributes Topology (continued)
Property
Port firewall filter to be applied on the RADIUS
server
Counters
User profiles on the RADIUS server
Configuring the Port Firewall Filter and Counters
CLI Quick
Configuration
Step-by-Step
Procedure
Settings
filter1
counter1
from Supplicant 2.
Supplicant 1 has the user profile
Supplicant 2 has the user profile
In this example, you configure a port firewall filter named
that will be applied to the supplicants based on the MAC addresses of the supplicants.
When you configure the filter, you also configure the counters called
Packets from each supplicant will be counted, helping you verify that the configuration
is working. Then, you check to see that the RADIUS server attribute is available on the
RADIUS server and apply the filter to the user profiles of each supplicant on the RADIUS
server. Finally, you verify the configuration by displaying output for the two counters.
NOTE: For more information about authentication, authorization, and
accounting (AAA) services, see the Junos OS System Basics Configuration
Guide at http://www.juniper.net/techpubs/software/junos/
Configure a port firewall filter and counters:
To quickly configure a port firewall filter with terms for Supplicant 1 and Supplicant 2 and
create parallel counters for each supplicant, copy the following commands and paste
them into the switch terminal window:
[edit]
set firewall family ethernet-switching filter filter1 term supplicant1 from source-mac-address
00:50:8b:6f:60:3a
set firewall family ethernet-switching filter filter1 term supplicant2 from source-mac-address
00:50:8b:6f:60:3b
set firewall family ethernet-switching filter filter1 term supplicant1 then count counter1
set firewall family ethernet-switching filter filter1 term supplicant2 then count counter2
To configure a port firewall filter and counters on the switch:
Configure a port firewall filter (here,
1.
upon the MAC address of each supplicant:
[edit firewall family ethernet-switching]
user@switch# set filter filter1 term supplicant1 from source-mac-address
00:50:8b:6f:60:3a
user@switch# set filter filter1 term supplicant2 from source-mac-address
00:50:8b:6f:60:3b
Create two counters that will count packets for each supplicant:
2.
Chapter 82: Examples: Access Control Configuration
counts packets from Supplicant 1, and
supplicant1
supplicant2
filter1 ) with terms for each supplicant based
counts packets
counter2
.
.
. The filter contains terms
filter1
and
counter1 counter2
.
.
2299