[j-nsp] MX240 static-subscribers radius policy

[Catalin Petrescu]

I have a dynamic profile for static subscribers configure as below:

root at MX240-1-R6# show dynamic-profiles 9
interfaces {
    "$junos-interface-ifd-name" {
        unit "$junos-underlying-interface-unit" {
            family inet {
                filter {
                    input "$junos-input-filter";
                    output "$junos-output-filter";
                }
            }
        }
    }
}

root at MX240-1-R6# show system services static-subscribers
access-profile {
    sbr;
}
dynamic-profile {
    9;
}
authentication {
    password "$9$At-bp1RcylMLx"; ## SECRET-DATA
    username-include {
        interface;
    }
}
group IP1 {
    interface demux0.1;
}

The user is authenticated and the filter are activated but only input works.

root at MX240-1-R6> show subscribers
Interface           IP Address/VLAN ID                      User Name
               LS:RI
demux0.1            100.100.100.6                           demux0.1
           default:default

root at MX240-1-R6> show firewall

ilter: 2M-demux0.1-in
Counters:
Name                                                Bytes
 Packets
2M-demux0.1-in                                       1596
19

Filter: 5M-demux0.1-out
Counters:
Name                                                Bytes
 Packets
5M-demux0.1-out                                         0
 0


output counters is always 0.

No idea why this is happening , with dynamic clients with dhcp output
filter is working.


Many thanks,

Catalin Petrescu