Configuring Aaa Profiles - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

7.
8.
9.
10.
11.
12.

Configuring AAA Profiles

An AAA profile is a set of characteristics that act as a pattern that you can assign to
domain names. Once you create an AAA profile, you can map it between a PPP
client's domain name and certain AAA services on given interfaces. Using AAA
profiles, you can:
An AAA profile contains a set of commands to control access for the incoming PPP
subscriber. If no AAA profile is used, AAA continues as normal. The user's name and
domain name are not changed as a result of an AAA profile mapping.
host1(config-if)#encapsulation ppp
Configure PAP or CHAP authentication.
host1((config-if))#ppp authentication chap
Apply the profile to the PPP interface.
host1(config-subif)#profile foo2
Configure the subinterface for a second PPP client.
host1(config-if)#interface atm 0/1.20.2
Configure PPP encapsulation.
host1(config-if)#encapsulation ppp
Configure PAP or CHAP authentication.
host1((config-if))#ppp authentication chap
Apply the profile to the PPP interface.
host1(config-subif)#profile foo2
Allow or deny a domain name access to AAA authentication
Map the original domain name to the mapped domain name for domain name
lookup
Use domain name aliases
Force tunneling whenever a domain map contains tunnel attributes
Manually set the NAS-Port-Type attribute (RADIUS attribute 61) for ATM and
Ethernet interfaces
Set the Service-Description attribute (RADIUS attribute 26-53)
Chapter 1: Configuring Remote Access
Configuring AAA Profiles
63