Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2716

Complete Software Guide for Junos
2620
®
OS for EX Series Ethernet Switches, Release 10.3
To deny access based on a destination IP address:
[root@freeradius]# cd /usr/local/etc/raddb
vi users
For each relevant user, add the
Juniper-Switching-Filter = "match destination-ip 192.168.1.0/31 action deny"
To set the packet loss priority (PLP) to
and the IP protocol:
[root@freeradius]# cd /usr/local/etc/raddb
vi users
For each relevant user, add the
Juniper-Switching-Filter = "match destination-mac 00:04:0f:fd:ac:fe, ip-protocol 2,
forwarding-class high, action loss-priority high"
NOTE: For the
class must be configured on the switch. If it is not configured on the
switch, this option is ignored. You must specify both the forwarding
class and the packet loss priority.
Stop and restart the RADIUS process to activate the configuration.
3.
Juniper-Switching-Filter
based on a destination MAC address
high
Juniper-Switching-Filter
option to be applied, the forwarding
forwarding-class
Copyright © 2010, Juniper Networks, Inc.
attribute:
attribute: