"On EX Series switches, firewall filters that you apply to interfaces enabled for 802.1X or MAC RADIUS authentication are dynamically combined with the per-user policies sent to the switch from the RADIUS server. The switch uses internal logic to dynamically combine the interface firewall filter with the user policies from the RADIUS server and create an individualized policy for each of the multiple users or nonresponsive hosts that are authenticated on the interface. " (https://www.juniper.net/documentation/en_US/junos/topics/example/802-1x-pnac-firewall-filters-for-multiple-supplicants.html)
Is there a way to show the effective dynamically generated policy?
i.e.
root@kjs-juniper12> show dot1x firewall ge-0/0/0
Filter name: dot1x_ge-0/0/0
Counters:
Name Bytes Packets
dot1x_ge-0/0/0_204c03172494 8552059 86984
dot1x_ge-0/0/0_204c03172494_t0 389844 4998
Is a way to show the effectively applied combined firewall filter, a la " show configuration firewall family ethernet-switching filter dot1x_ge-0/0/0"