username-include (Local Authentication)
Syntax
username-include {
circuit-id;
delimiter character;
domain-name name;
mac-address;
remote-id;
}
Hierarchy Level
[edit dynamic-profiles name interfaces
$junos-interface-ifd-name unit $junos-interface-unit ppp-options local-authentication]
Release Information
Statement introduced in Junos OS Release 18.2R1.
Description
Configure a local username that authd can use to request authentication for terminated PPP subscribers. This enables the external RADIUS server to pass implementation-specific configuration for successfully authenticated subscribers. Local authentication supports CPEs that do not negotiate authentication protocols in the same dynamic profile as CPEs that use only PAP or CHAP authentication.
The username takes the following format when you use the default delimiter:
mac-address.circuit-id.remote-id@domain-name
Options
circuit-id—Include
the agent circuit identifier (ACI) in the local username.
delimiter character—Specify the character that separates components that
make up the concatenated username.
Default: Period (.)
domain-name name—Specify the domain name that ends the local username
created for the subscribers. The username is sent to RADIUS in the
Access-Request message. The string can include the following characters:
a through z, A through Z, 0 through 9, “-“, or “.”.
mac-address—Include
the MAC address from the client PDU in the local username.
remote-id—Include the
agent remote identifier (ARI) in the local username.
Required Privilege Level
interface