Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 393 / 788

After configuring a tunnel group and the attributes for its tunnels, you can assign
the tunnel group to the domain map from Domain Map mode. The tunnel group
reference in the domain map is used instead of tunnel definitions configured
from Domain Map Tunnel configuration mode.
The RADIUS server can reference tunnel groups through the RADIUS Tunnel
Group [26-64] attribute. The advantages of RADIUS support for tunnel groups
are:
■
The RADIUS server can maintain a single tunnel group attribute associated
with each user instead of sets of tunnel attributes for each user.
■
The RADIUS server can authenticate users before attempting to establish
tunnels.
Related Topics
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
on page 353
■
■
Mapping User Domain Names to L2TP Tunnels from Tunnel Group Tunnel Mode
on page 357
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
To map a domain to an L2TP tunnel locally on the router from Domain Map Tunnel
mode, perform the following steps:
1.
Specify a domain name and enter Domain Map Configuration mode:
host1(config)# aaa domain-map westford.com
host1(config-domain-map)#
2.
Specify a virtual router; in this case, the default router is specified.
host1(config-domain-map)# router-name default
3.
Specify a tunnel to configure and enter Domain Map Tunnel Configuration mode:
host1(config-domain-map)# tunnel 3
4.
Specify the LNS endpoint address of a tunnel.
host1(config-domain-map-tunnel)# address 192.0.2.13
5.
(Optional) Assign a tunnel group to the domain map. You can assign a tunnel
group only when no tunnels are currently defined for the domain map from AAA
Domain Map Tunnel mode.
host1(config-domain-map)# tunnel group storm
6.
Specify a preference for the tunnel.
You can specify up to eight levels of preference, and you can assign the same
preference to a maximum of 31 tunnels. When you define multiple preferences
for a destination, you increase the probability of a successful connection.
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
■ 353
Chapter 12: Configuring an L2TP LAC