Configuring AAA Profiles

An AAA profile is a set of characteristics that act as a pattern that you can assign to domain names. Once you create an AAA profile, you can map it between a PPP client’s domain name and certain AAA services on given interfaces. Using AAA profiles, you can:

• Allow or deny a domain name access to AAA authentication
• Map the original domain name to the mapped domain name for domain name lookup
• Use domain name aliases
• Force tunneling whenever a domain map contains tunnel attributes
• Manually set the NAS-Port-Type attribute (RADIUS attribute 61) for ATM and Ethernet interfaces
• Set the Service-Description attribute (RADIUS attribute 26-53)

An AAA profile contains a set of commands to control access for the incoming PPP subscriber. If no AAA profile is used, AAA continues as normal. The user’s name and domain name are not changed as a result of an AAA profile mapping.

Note: There are two domain names with special meaning. The domain name none indicates that there is no domain name present in the subscriber’s name. For more information about none, see the section Mapping User Requests Without a Valid Domain Name. The domain name default indicates that no other match occurs. For more information about default, see the section Mapping User Requests Without a Configured Domain Name.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.