Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual page 101

Example 2
Copyright © 2010, Juniper Networks, Inc.
NOTE: If there is no matching entry in the AAA profile for the user's domain name or
for the domain name default, then AAA continues processing as if there were no AAA
profile.
If the user's name does not contain a domain name, then AAA attempts to match to
the domain name none in the AAA profile. If there is no entry for none, then AAA attempts
to match for the domain name default in the AAA profile. If there is no entry for either
none or default, then AAA continues processing as if there were no AAA profile.
In this example, an administrator wants to use aliases; that is, to associate multiple
domain names with a specific domain name and not allow other domain names.
Create an AAA profile.
1.
host1(config)#aaa profile toAbc
Map the original domain name to the mapped domain name for domain map lookup.
2.
host1(config-aaa-profile)#translate abc1.com abc.com
host1(config-aaa-profile)#translate abc2.com abc.com
host1(config-aaa-profile)#translate abc3.com abc.com
Specify the domain name you want to restrict.
3.
host1(config-aaa-profile)#deny default
Associate the AAA profile with the designated PPP interface.
4.
host1(config-if)#ppp aaa-profile toAbc
When configured as such, the following scenario is typical:
PPP passes the AAA profile toAbc to AAA in the authentication request.
AAA:
Receives the authentication request from PPP with the subscriber's name
jane@abc1.com
Parses the domain name abc1.com and examines the specified AAA profile toAbc
Determines that the AAA profile toAbc is valid
Searches toAbc for a match on the PPP subscriber's domain name and finds a match
Continues as normal using the domain name abc.com
Chapter 1: Configuring Remote Access
63