Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 103 / 788

host1(config-if)# encapsulation ppp
7.
Configure PAP or CHAP authentication.
host1((config-if))# ppp authentication chap
8.
Apply the profile to the PPP interface.
host1(config-subif)# profile foo2
9.
Configure the subinterface for a second PPP client.
host1(config-if)# interface atm 0/1.20.2
10.
Configure PPP encapsulation.
host1(config-if)# encapsulation ppp
11.
Configure PAP or CHAP authentication.
host1((config-if))# ppp authentication chap
12.
Apply the profile to the PPP interface.
host1(config-subif)# profile foo2
Configuring AAA Profiles
An AAA profile is a set of characteristics that act as a pattern that you can assign to
domain names. Once you create an AAA profile, you can map it between a PPP
client’s domain name and certain AAA services on given interfaces. Using AAA
profiles, you can:
■
Allow or deny a domain name access to AAA authentication
■
Map the original domain name to the mapped domain name for domain name
lookup
■
Use domain name aliases
■
Force tunneling whenever a domain map contains tunnel attributes
■
Manually set the NAS-Port-Type attribute (RADIUS attribute 61) for ATM and
Ethernet interfaces
■
Set the Service-Description attribute (RADIUS attribute 26-53)
An AAA profile contains a set of commands to control access for the incoming PPP
subscriber. If no AAA profile is used, AAA continues as normal. The user’s name and
domain name are not changed as a result of an AAA profile mapping.
Configuring AAA Profiles
■ 63
Chapter 1: Configuring Remote Access