Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring an AAA Per-Profile Attribute List

    JunosE Software enables you to configure AAA-specific attributes for subscribers attached to a specific PPP profile. If a per-profile list is configured, then only the attributes specified in the per-profile list are processed. If the per-profile list is not configured, then the existing standard attributes are configured.

    Note: The attributes supported by the per-profile list take precedence over the standard AAA attribute configuration. By default, the inclusion of all attributes is disabled in the per-profile list.

    This feature enables you to configure the following AAA attributes:

    • tunnel ignore nas-port
    • tunnel ignore nas-port-type

    In this example, AAA-specific attributes are configured for subscribers attached to a specific PPP profile. You can configure this as follows:

    1. Create an AAA per-profile attribute list, and configure the required AAA attributes in the list.
      host1(config)#aaa per-profile-attr-list abchost1 (config-perprofile-list)#action-type enablehost1 (config-perprofile-list)#attributes tunnel-ignore-nasport tunnel-ignore-nasport-type
    2. Create an AAA profile.
      host1(config)#aaa profile aaaprofile1
    3. Specify the AAA attribute list in the AAA profile.
      host1(config-aaa-profile)#aaa-perprofilelist-name abc
    4. Create a PPP profile.
      host1(config)#profile pppprofile1
    5. Attach the AAA profile name to the PPP profile.
      host1(config-profile)#ppp aaa-profile aaaprofile1
    6. To view the attributes configured in the AAA per-profile attribute list, issue the show aaa per-profile-attr-list command.
      host1#show aaa per-profile-attr-list abc
      Profile name: abc
      Attribute Name              Status
      –––––––––––––––            ––––––––
      tunnel-ignore-nasport       enabled
      tunnel-ignore-nasport-type  enabled

    Published: 2014-08-20