Domain Name And Realm Name Examples; Specifying A Single Name For Users From A Domain; Table 3: Username And Domain Name Examples - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual

JunosE 11.3.x Broadband Access Configuration Guide

Domain Name and Realm Name Examples

Specifying a Single Name for Users from a Domain

16
host1(config)#aaa domain-map xyz.com
host1(config-domain-map)#strip-domain enable
Use the no version to return to the default, disabled.
See strip-domain
This section provides examples of possible domain or realm name results that you might
obtain, depending on the commands and options you specify. This example uses the
following username:
username: usEast/userjohn@abc.com@xyz.com
The router is configured with the following commands:
host1(config)#aaa delimiter domainName @!
host1(config)#aaa delimiter realmName /
Table 3 on page 16 shows the username and domain name that result from the parsing
action of the various commands.

Table 3: Username and Domain Name Examples

Command
aaa parse-order realm-first
aaa parse-order domain-first
aaa parse-direction domainName
right-to-left
aaa parse-direction domainName
left-to-right
aaa parse-direction realmName
right-to-left
aaa parse-direction realmName
left-to-right
Assigning a single username and a single password for all users associated with a domain
provides better compatibility with some RADIUS servers. You can use this feature for
domains that require the router to tunnel, but not terminate, PPP sessions.
When users request a PPP session, they specify usernames and passwords. During the
negotiations for the PPP session, the router authenticates legitimate users.
Resulting Username
userjohn@abc.com@xyz.com
userjohn@abc.com
userjohn@abc.com
userjohn
userjohn@abc.com@xyz.com
userjohn@abc.com@xyz.com
Copyright © 2010, Juniper Networks, Inc.
Resulting Domain
Name
usEast
xyz.com
xyz.com
abc.com@xyz.com
usEast
usEast