Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual page 522

JunosE 11.3.x Broadband Access Configuration Guide
484
Disable the DHCP local server for standalone mode.
1.
host1(config)#no service dhcp-local standalone
Enable AAA-based authentication for DHCP local server standalone mode clients.
2.
host1(config)#service dhcp-local standalone authenticate
Specify the password. that authenticates a locally configured DHCP standalone mode
3.
client. In DHCP standalone mode, the password is presented to AAA in an
authentication request.
host1(config)#ip dhcp-local auth password to4tooL8
Specify the domain for a username that is locally configured for a DHCP standalone
4.
mode client. The locally configured username is presented to AAA in an authentication
request.
host1(config)#ip dhcp-local auth domain ISP1.com
Specify the user-prefix for a username that is locally configured for a DHCP standalone
5.
mode client. The locally configured username is presented to AAA in an authentication
request.
host1(config)#ip dhcp-local auth user-prefix ERX4-Boston
Include optional information as part of the locally configured username for a DHCP
6.
standalone mode client. The optional information becomes part of the AAA subscriber
record, and is then used to determine the IP address pool from which to assign the
address for the DHCP client.
Use the following keywords to include specific information:
circuit-identifier—Specifies the circuit identifier of the interface on which the DHCP
client's request was received.
circuit-type—Specifies the circuit type of the interface on which the DHCP client's
request was received.
mac-address—Specifies the DHCP client's MAC address.
option82—Specifies the DHCP client's option 82 value.
virtual-router-name—Specifies the DHCP local server's virtual router name.
host1(config)#ip dhcp-local auth include virtual-router-name
host1(config)#ip dhcp-local auth include circuit-type
host1(config)#ip dhcp-local auth include circuit-identifier
(Optional) Verify your authentication configuration.
7.
host1(config)#show ip dhcp-local auth config
DHCP Local Server Authentication Configuration
User-Prefix
Domain
Password
Virtual Router
Circuit Type
Circuit ID
: ERX4-Boston
: ISP1.com
: to4TooL8
: included
: included
: included
Copyright © 2010, Juniper Networks, Inc.