Juniper JUNOSE 11.0.X MULTICAST ROUTING, Руководство по настройке

Страница: 53 / 788

host1(config)# aaa delimiter domainName @!
Using Either the Domain or the Realm as the Domain Name
If the username contains both a realm name and a domain name delimiter, you can
use either the domain name or the realm name as the domain name. As previously
mentioned, the router treats usernames with multiple delimiters as though the realm
name is to the left of the realm delimiter and the domain name is to the right of the
domain delimiter.
If you set the parse order to:
■
domain-first—The router searches for a domain name first. For example, for
username usEast/lori@abc.com, the domain name is abc.com.
■
realm-first—The router searches for a realm name first and uses the realm name
as the user’s domain name. For username usEast/lori@abc.com, the domain is
usEast.
For example, if you set the delimiter for the realm name to / and set the delimiter
for the domain name to @, the router parses the realm first by default. The username
usEast/lori@abc.com results in a domain name of usEast. To cause the parsing to
return abc.com as the domain, enter the
aaa parse-order domain-first command.
Specifying the Domain Name or Realm Name Parse Direction
You can specify the direction—either left to right or right to left—in which the router
performs the parsing operation when identifying the realm name or domain name.
This feature is particularly useful if the username contains nested realm or domain
names. For example, for a username of userjohn@abc.com@xyz.com, you can
identify the domain as either abc.com@xyz.com or as xyz.com, depending on the
parse direction that you specify.
You use either the left-to-right or right-to-left keywords with one of the following
keywords to specify the type of search and parsing that the router performs:
■
domainName —The router searches for the next domain delimiter value in the
direction specified. When it reaches a delimiter, the router uses anything to the
right of the delimiter as the domain name. Domain parsing is from right to left
by default.
■
realmName —The router searches for the next realm delimiter value in the
direction specified. When it reaches a delimiter, the router uses anything to the
left of the delimiter as the realm name. Realm parsing is from left to right by
default.
■
Example
host1(config)# aaa parse-direction domainName left-to-right
Setting Up Domain Name and Realm Name Usage
■ 13
Chapter 1: Configuring Remote Access