Configuring Radius Authentication And Accounting Servers - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

override-user

Configuring RADIUS Authentication and Accounting Servers

Copyright © 2010, Juniper Networks, Inc.
Use to map a domain name to a virtual router or to access Domain Map Configuration
mode.
Example
host1(config)#aaa domain-map xyz.com
host1(config-domain-map)#
Use the no version to delete the map entry.
See aaa domain-map
Use to specify a single username and single password for all users from a domain in
place of the values received from the remote client.
Use only for domains that require the router to tunnel and not terminate PPP sessions.
If you specify a password only, the router substitutes the domain name for the username
and associates the new password with the user. If you specify a password only and
you have configured the domain name none with the aaa domain-map command, the
router rejects any users without domain names.
If you specify a name and password, the router associates both the new name and
password with the user.
Example
host1(config-domain-map)#override-user name boston password abc
Use the no version to revert to the original username.
See override-user
The number of RADIUS servers you can configure depends on available memory.
The order in which you configure servers determines the order in which the router contacts
those servers on behalf of clients.
Initially, a RADIUS client sends a request to a RADIUS authentication or accounting server.
The RADIUS server uses the configured IP address, the UDP port number, and the secret
key to make the connection. The RADIUS client waits for a response for a configurable
timeout period and then retransmits the request. The RADIUS client retransmits the
request for a user-configurable retry limit.
If there is no response from the primary RADIUS server, the RADIUS client submits the
request to the secondary RADIUS server using the timeout period and retry limit
configured for the secondary RADIUS server.
If the connection attempt fails for the secondary RADIUS server, the router submits
the request to the tertiary server and so on until it either is granted access on behalf
of the client or there are no more configured servers.
Chapter 1: Configuring Remote Access
17