Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 52 / 788

Setting Up Domain Name and Realm Name Usage
To provide flexibility in how the router handles different types of usernames, the
software lets you specify the part of a username to use as the domain name, how
the domain name is designated, and how the router parses names. It also allows you
to set whether or not the router strips the domain name from the username before
it sends the username to the RADIUS server.
By default, the router parses usernames as follows:
realmName/personalName@domainName
The string to the left of the forward slash (/) is the realm name, and the string to the
right of the at-symbol (@) is the domain name. For example, in the username
juniper/jill@abc.com, juniper is the realm name and abc.com is the domain name.
The router allows you to:
■
Use the realm name as the domain name.
■
Use delimiters other than / to designate the realm name.
■
Use delimiters other than @ to designate the domain name.
■
Use either the domain or the realm as the domain name when the username
contains both a realm and domain name.
■
Change the direction in which the router searches for the domain name or the
realm name.
To provide these features, the router allows you to specify delimiters for the domain
name and realm name. You can use up to eight one-character delimiters each for
domain and realm names. The router also lets you specify how it parses usernames
to determine which part of a username to use as the domain name.
Using the Realm Name as the Domain Name
Typically, a realm appears before the user field and is separated with the / character;
for example, usEast/jill@abc.com. To use the realm name usEast rather than abc.com
as the domain name, set the realm name delimiter to /. For example:
host1(config)# aaa delimiter realmName /
This command causes the router to use the string to the left of the / as the domain
name. If the realm name delimiter is null (the default), the router will not search for
the realm name.
Using Delimiters Other Than @
You can set up the router to recognize delimiters other than @ to designate the
domain name. Suppose there are two users: bob@abc.com and pete!xyz.com, and
you want to use both of their domain names. In this case you would set the domain
name delimiter to @ and !. For example:
12 ■
Setting Up Domain Name and Realm Name Usage
JUNOSe 11.0.x Broadband Access Configuration Guide