aaa-options (PPP Profile)
Statement introduced in Junos OS Release 16.2.
Specify a set of AAA options that is used for authentication of PPP subscribers. The set of options is defined globally with the aaa-options aaa-options-name statement at the [edit access] hierarchy level.
You can specify the option set in a dynamic PPP profile or in a group profile.
In a dynamic PPP profile—In this case, usernames are examined and modified for dynamic PPP subscribers logging in by means of the subscriber and AAA contexts that are specified in the AAA options set. The option set must include the access-profile profile-name statement to specify the name of a subscriber access profile.
In a group profile—In this case, usernames are examined and modified for tunneled PPP subscribers on the LNS logging in by means of the subscriber and AAA contexts that are specified in the AAA options set.
When PPP options are configured in both a group profile and a dynamic profile, the dynamic profile configuration takes complete precedence over the group profile when the dynamic profile includes one or more of the PPP options that can be configured in the group profile. Complete precedence means that there is no merging of options between the profiles. The group profile is applied to the subscriber only when the dynamic profile does not include any PPP option available in the group profile.
This meant that aaa-options configured in a group profile is not applied when the dynamic profile includes any PPP-option, even when the dynamic profile does not include aaa-options.
Required Privilege Level
access—To view this statement in the configuration.
access-control—To add this statement to the configuration.