Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010, Configuration Manual

Page: 56 / 794

username: usEast/userjohn@abc.com@xyz.com
The router is configured with the following commands:
host1(config)# aaa delimiter domainName @!
host1(config)# aaa delimiter realmName /
Table 3 on page 16 shows the username and domain name that result from the
parsing action of the various commands.
Table 3: Username and Domain Name Examples
Resulting Domain
Name
Resulting Username Command
usEast userjohn@abc.com@xyz.com aaa parse-order realm-first
xyz.com userjohn@abc.com aaa parse-order domain-first
xyz.com userjohn@abc.com aaa parse-direction domainName
right-to-left
abc.com@xyz.com userjohn aaa parse-direction domainName
left-to-right
usEast userjohn@abc.com@xyz.com aaa parse-direction realmName
right-to-left
usEast userjohn@abc.com@xyz.com aaa parse-direction realmName
left-to-right
Specifying a Single Name for Users from a Domain
Assigning a single username and a single password for all users associated with a
domain provides better compatibility with some RADIUS servers. You can use this
feature for domains that require the router to tunnel, but not terminate, PPP sessions.
When users request a PPP session, they specify usernames and passwords. During
the negotiations for the PPP session, the router authenticates legitimate users.
NOTE: This feature works only for users authenticated by Password Authentication
Protocol (PAP) and not by Challenge Handshake Authentication Protocol (CHAP).
If you configure this feature, the router substitutes the specified username and
password for all authenticated usernames and passwords associated with that domain.
There are two options for this feature. The router can:
■
Substitute the domain name for each username and one new password for each
existing password.
16 ■
Specifying a Single Name for Users from a Domain
JUNOSe 11.1.x Broadband Access Configuration Guide