3.3.5.2.1 MS-Quarantine-IPFilter
When a NAS that supports this attribute <16> receives it, the NAS MUST apply the filters defined in this attribute on the endpoint connection.
For the late bound field, this is used to allow a NAS to change a field in the filter after the connection with the endpoint is complete. For example, the attribute would be configured for "ANY" to be used as the source address. The filter is implemented on the NAS as ANY. When the connection with the endpoint completes and the client is assigned an address, the filter is replaced with a specific value.
For more details about this attribute, see section 2.2.1.3.