JunosE 11.3.x Broadband Access Configuration Guide
Configuration Commands
aaa authentication default
aaa local database
aaa local select database
42
host1(config)# aaa authentication ppp default local
To enable local authentication on a specific virtual router, first select the virtual router:
host1(config)# virtual-router cleveland
host1:cleveland(config)# aaa authentication ppp default local
Use the following commands to configure the local authentication server.
Use to specify that the local authentication method is used to authenticate PPP
subscribers on the default virtual router or on the selected virtual router.
NOTE: You can specify multiple authentication methods; for example, aaa
authentication ppp default local radius. If, during local authentication, the
matching user entry is not found in a populated database or if it is found
and rejected, the authentication procedure terminates. However, if the
specified local user database is empty or if it does not exist, the
authentication process uses the next authentication method specified
(RADIUS in this case).
Example
host1(config)#aaa authentication ppp default local radius
Use the no version to restore the default authentication method of radius.
See aaa authentication default
Use to create a local user database.
Use the database name default to specify the default local user database, or enter a
name for the specific local user database.
Example
host1(config)#aaa local database westLocal40
Use the no version to delete the specified database and all entries in the database.
See aaa local database
Use to assign the local user database that the virtual router uses for local authentication.
Example
host1(config)#virtual-router cleveland
host1:cleveland(config)#aaa local select database westLocal40
Copyright © 2010, Juniper Networks, Inc.