Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual page 107

NOTE: If there is no matching entry in the AAA profile for the user's domain name
or for the domain name default, then AAA continues processing as if there were no
AAA profile.
If the user's name does not contain a domain name, then AAA attempts to match
to the domain name none in the AAA profile. If there is no entry for none, then AAA
attempts to match for the domain name default in the AAA profile. If there is no
entry for either none or default, then AAA continues processing as if there were no
AAA profile.
aaa profile
allow
deny
Searches toAbc for a match on the PPP subscriber's domain name and finds
a match
Continues as normal using the domain name abc.com
Use to configure a new AAA profile.
Example
host1(config)#aaa profile boston123
Use the no version to delete the AAA profile.
See aaa profile
Use to specify the domain name(s) that you want to be allowed access to AAA
authentication.
This command does not indicate that the user will be granted access; it is simply
the first access point to AAA authentication.
Using this command does not implicitly deny all other domains.
Example
host1(config-aaa-profile)#allow xyz.com
Use the no version to negate the command.
See allow
Use to specify the domain name(s) that you want to be denied access to AAA
authentication.
Example
host1(config-aaa-profile)#deny xyz.com
Chapter 1: Configuring Remote Access
Configuring AAA Profiles
67