Using The Realm Name As The Domain Name; Using Delimiters Other Than; Using Either The Domain Or The Realm As The Domain Name - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

JunosE 11.2.x Broadband Access Configuration Guide

Using the Realm Name as the Domain Name

Using Delimiters Other Than @

Using Either the Domain or the Realm as the Domain Name

12
The string to the left of the forward slash (/) is the realm name, and the string to the right
of the at-symbol (@) is the domain name. For example, in the username
juniper/jill@abc.com, juniper is the realm name and abc.com is the domain name.
The router allows you to:
Use the realm name as the domain name.
Use delimiters other than / to designate the realm name.
Use delimiters other than @ to designate the domain name.
Use either the domain or the realm as the domain name when the username contains
both a realm and domain name.
Change the direction in which the router searches for the domain name or the realm
name.
To provide these features, the router allows you to specify delimiters for the domain
name and realm name. You can use up to eight one-character delimiters each for domain
and realm names. The router also lets you specify how it parses usernames to determine
which part of a username to use as the domain name.
Typically, a realm appears before the user field and is separated with the / character; for
example, usEast/jill@abc.com. To use the realm name usEast rather than abc.com as
the domain name, set the realm name delimiter to /. For example:
host1(config)#aaa delimiter realmName /
This command causes the router to use the string to the left of the / as the domain name.
If the realm name delimiter is null (the default), the router will not search for the realm
name.
You can set up the router to recognize delimiters other than @ to designate the domain
name. Suppose there are two users: bob@abc.com and pete!xyz.com, and you want to
use both of their domain names. In this case you would set the domain name delimiter
to @ and !. For example:
host1(config)#aaa delimiter domainName @!
If the username contains both a realm name and a domain name delimiter, you can use
either the domain name or the realm name as the domain name. As previously mentioned,
the router treats usernames with multiple delimiters as though the realm name is to the
left of the realm delimiter and the domain name is to the right of the domain delimiter.
If you set the parse order to:
domain-first—The router searches for a domain name first. For example, for username
usEast/lori@abc.com, the domain name is abc.com.
Copyright © 2010, Juniper Networks, Inc.