Local Authentication Example - Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual

Local Authentication Example

Example 1
Copyright © 2010, Juniper Networks, Inc.
NOTE: CHAP authentication requires that passwords and secrets be stored in clear
text or use two-way encryption. Two-way encryption is not supported for the secret
command. Therefore, use the password command if you want to enable encryption for
subscribers that use CHAP authentication.
Example
host1(config-local-user)#username cksmith secret 5 Q3&t9REwk45jxSM#fj$z
Use the no version to delete the username entry from the default local user database.
See user-name
This example creates a sample local authentication environment. The steps in this
example:
Create a named local user database (westfordLocal40).
1.
Configure the database westfordLocal40.
2.
Add users btjones and maryrdavis and their attributes to the database.
Create the default local database using the optional username command.
3.
Add optional subscriber parameters for user cksmith to the default database.
Assign the default local user database to virtual router cleveland; assign database
4.
westfordLocal40 to the default virtual router and to virtual router chicago.
Enable AAA authentication methods local and none on all virtual routers.
5.
Use the show commands to display information for the local authentication
6.
environment (various show command displays are listed after the example).
This example shows the commands you use to create the AAA local authentication
environment.
host1(config)#aaa local database westfordLocal40
host1(config)#aaa local username btjones database westfordLocal40
host1(config-local-user)#secret 38schillCy
host1(config-local-user)#ip-address-pool addressPoolA
host1(config-local-user)#operational-virtual-router boston2
host1(config-local-user)#exit
host1(config)#aaa local username maryrdavis database westfordLocal40
host1(config-local-user)#secret 0 dav1sSecret99
host1(config-local-user)#ip-address 192.168.20.106
host1(config-local-user)#operational-virtual-router boston1
host1(config-local-user)#exit
host1(config)#username cksmith password 0 yourPassword1
host1(config)#aaa local username cksmith database default
host1(config-local-user)#ip-address-pool addressPoolA
host1(config-local-user)#operational-virtual-router boston2
Chapter 1: Configuring Remote Access
45