Juniper JUNOSE 11.0.X MULTICAST ROUTING, Руководство по настройке

Страница: 80 / 788

Configuring Local Authentication Servers
The AAA local authentication server enables the E Series router to provide local PAP
and CHAP user authentication for subscribers. The router also provides limited
authorization, using the IP address, IP address pool, and operational virtual router
parameters. When a subscriber logs on to the E Series router that is using local
authentication, the subscriber is authenticated against user entries in a local user
database; the optional parameters are assigned to subscribers after the subscriber
is authenticated.
Creating the Local Authentication Environment
To create your local authentication environment:
1.
Create local user databases—Create the default database or a named database.
2.
Add entries to local user databases—Add user entries to the database. A database
can contain information for multiple users.
3.
Assign a local user database to the virtual router—Specify the database that the
virtual router will use to authenticate subscribers.
4.
Enable local authentication on the virtual router—Specify the local method as
an AAA authentication method used by the virtual router.
Creating Local User Databases
When a subscriber connects to an E Series router that is using local authentication,
the local authentication server uses the entries in the local user database selected by
the virtual router to authenticate the subscriber.
A local authentication server can have multiple local user databases, and each
database can have entries for multiple subscribers. The default local user database,
if it exists, is used for local authentication by default. The E Series router supports a
maximum of 100 user entries. A maximum of 100 databases can be configured.
To create a local user database, use the aaa local database command and the name
of the database; use the name default to create the default local user database:
host1(config)# aaa local database westLocal40
Adding User Entries to Local User Databases
The local authentication server uses the information in a local user database to
authenticate a subscriber. A local user database can contain information for multiple
users.
The E Series router provides two commands for adding entries to local user databases:
the
username command and the aaa local username command. You can specify
the following parameters:
40 ■
Configuring Local Authentication Servers
JUNOSe 11.0.x Broadband Access Configuration Guide