Juniper JUNOSE SOFTWARE 11.2.X - LINK LAYER CONFIGURATION GUIDE 7-7-2010 Configuration Manual page 607

ppp authentication
Copyright © 2010, Juniper Networks, Inc.
Use to assign an AAA profile to static and dynamic, multilink and nonmultilink PPP
interfaces.
The PPP application associates the AAA profile with the interface and passes the AAA
profile to AAA for authentication.
If an AAA profile is deleted after it has been assigned to an interface, AAA denies the
authentication and logs a message.
When you remove an AAA profile, it does not remove any corresponding bindings
between PPP interfaces or interface profiles and the AAA profile. If an AAA profile with
the same name is added, the interface cannot authenticate until the AAA profile is
reassigned.
NOTE: Although an AAA profile and an interface profile have similar functionality, they
are not related and you need to treat them differently.
Example
host1(config-profile)#ppp aaa-profile westford24
Use the no version to remove the AAA profile assignment.
NOTE: For more information about AAA profiles, see JunosE Broadband Access
Configuration Guide.
See ppp aaa-profile.
Use to require authentication from the PPP peer.
To specify the name of a virtual router (VR) to be used as the authentication VR context,
use the virtual-router keyword. Keep the following points in mind when you use the
ppp authentication virtual-router command:
When you specify a VR in the ppp authentication command, AAA does not query
the domain map for the assigned VR context. Instead, AAA uses the VR specified in
the ppp authentication command as the authentication VR context and issues the
authentication request to the authentication server in the assigned VR context.
If you specify the default VR as the authentication VR context, AAA loosely binds
the user to the default VR. This means that RADIUS can override the default VR
context with a new VR context during the authentication process. When the ppp
authentication virtual-router command specifies the default VR, AAA returns either
the default VR or the VR specified by RADIUS.
If you specify a VR other than the default VR as the authentication VR, AAA tightly
binds the user to the specified VR. This means that RADIUS cannot override the
specified VR context with a new VR context during the authentication process. When
Chapter 17: Configuring Dynamic Interfaces
575