Assigning A Local User Database To A Virtual Router; Enabling Local Authentication On The Virtual Router - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual

Assigning a Local User Database to a Virtual Router

Enabling Local Authentication on the Virtual Router

Copyright © 2010, Juniper Networks, Inc.
Specify the subscriber's username and the database you want to use. Use the database
1.
name default to specify the default local user database. This command also puts the
router into Local User Configuration mode.
host1(config)# aaa local username cksmith database westLocal40
host1(config-local-user)#
NOTE: You can use the aaa local username command to add or modify
user entries to a default database that was created by the username
command.
(Optional) Specify the type of encryption algorithm and the password or secret that
2.
the subscriber must use to connect to the router. A subscriber can be assigned either
a password or a secret, but not both. For example:
host1(config-local-user)#password 8 iTtakes2%
(Optional) Specify the IP address to assign to the subscriber.
3.
host1(config-local-user)#ip-address 192.168.101.19
(Optional) Specify the IP address pool used to assign the subscriber's IP address.
4.
host1(config-local-user)#ip-address-pool svPool2
(Optional) Assign the subscriber to an operational virtual router. This parameter is
5.
applicable only if the subscriber is authenticated in the default virtual router.
host1(config-local-user)#operational-virtual-router boston2
Use the procedure in this section to assign a local user database to a virtual router. The
virtual router uses the database for local authentication when the subscriber connects
to the E Series router. Use the following commands in Global Configuration mode:
NOTE: If you do not specify a local user database, the virtual router selects
the default database by default. This applies to all virtual routers.
Specify the virtual router name.
1.
host1(config)# virtual-router cleveland
Specify the database to use for authentication on this virtual router.
2.
host1:cleveland(config)# aaa local select database westLocal40
On the E Series router, RADIUS is the default AAA authentication method for PPP
subscribers. Use the commands in this section to specify that the local authentication
method is used.
To enable local authentication on the default router, use the following command:
Chapter 1: Configuring Remote Access
41