Using Domain Name Aliases - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

Using Domain Name Aliases

You can translate an original domain name to a new domain name via the translate
command. The command allows you to create domain name aliases; that is, the
grouping of multiple domain names into a single domain name. You can partition
PPP subscribers with the same domain into separate domains, based on the PPP
interface.
NOTE: Partitioning subscribers does not cause modification of a user's name or
domain.
When you use aliases, you greatly simplify the configuration process. When there
are a large number of domains and you use aliases, it reduces the configuration
volume, thus requiring less NVS and memory usage.
In this example, an administrator wants to associate all subscribers of a PPP interface
Example 1
with a specific domain name.
1.
2.
3.
When configured as such, the following scenario is typical:
Searches restrictToABC for a match on the domain name default.
Finds a match and denies the user access.
Create an AAA profile.
host1(config)#aaa profile forwardToXyz
Map the original domain name to the mapped domain name for domain map
lookup.
host1(config-aaa-profile)#translate default xyz.com
Associate the AAA profile with the designated PPP interface.
host1(config-if)#ppp aaa-profile forwardToXyz
PPP passes the AAA profile forwardToXyz to AAA in the authentication request.
AAA performs the following tasks:
Receives the authentication request from PPP with the subscriber's name
morris@abc.com.
Parses the domain name abc.com and examines the specified AAA profile
forwardToXyz.
Determines that the AAA profile forwardToXyz is valid.
Searches forwardToXyz for a match on the PPP subscriber's domain name
and finds no match.
Chapter 1: Configuring Remote Access
Configuring AAA Profiles
65