Example: Associating all Subscribers of a PPP Interface with a Specific Domain Name

In this example, an administrator wants to associate all subscribers of a PPP interface with a specific domain name.

1. Create an AAA profile.
   host1(config)#aaa profile forwardToXyz
2. Map the original domain name to the mapped domain name for domain map lookup.
   host1(config-aaa-profile)#translate default xyz.com
3. Associate the AAA profile with the designated PPP interface.
   host1(config-if)#ppp aaa-profile forwardToXyz

When configured as such, the following scenario is typical:

• PPP passes the AAA profile forwardToXyz to AAA in the authentication request.
• AAA performs the following tasks:
  • Receives the authentication request from PPP with the subscriber’s name morris@abc.com.
  • Parses the domain name abc.com and examines the specified AAA profile forwardToXyz.
  • Determines that the AAA profile forwardToXyz is valid.
  • Searches forwardToXyz for a match on the PPP subscriber’s domain name and finds no match.
  • Searches forwardToXyz for a match on the domain name default.
  • Finds a match and continues as normal using the domain name xyz.com.

    Note: If there is no matching entry in the AAA profile for the user’s domain name or for the domain name default, then AAA continues processing as if there were no AAA profile. If the user’s name does not contain a domain name, then AAA attempts to match to the domain name none in the AAA profile. If there is no entry for none, then AAA attempts to match for the domain name default in the AAA profile. If there is no entry for either none or default, then AAA continues processing as if there were no AAA profile.

Related Documentation

• aaa profile
• allow
• deny
• ppp aaa-profile
• translate