Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual page 103

aaa profile
allow
deny
ppp aaa-profile
Copyright © 2010, Juniper Networks, Inc.
NOTE: If there is no matching entry in the AAA profile for the user's
domain name or for the domain name default, then AAA continues
processing as if there were no AAA profile.
If the user's name does not contain a domain name, then AAA attempts
to match to the domain name none in the AAA profile. If there is no entry
for none, then AAA attempts to match for the domain name default in
the AAA profile. If there is no entry for either none or default, then AAA
continues processing as if there were no AAA profile.
Use to configure a new AAA profile.
Example
host1(config)#aaa profile boston123
Use the no version to delete the AAA profile.
See aaa profile
Use to specify the domain name(s) that you want to be allowed access to AAA
authentication.
This command does not indicate that the user will be granted access; it is simply the
first access point to AAA authentication.
Using this command does not implicitly deny all other domains.
Example
host1(config-aaa-profile)#allow xyz.com
Use the no version to negate the command.
See allow
Use to specify the domain name(s) that you want to be denied access to AAA
authentication.
Example
host1(config-aaa-profile)#deny xyz.com
Use the no version to negate the command.
See deny
Chapter 1: Configuring Remote Access
65