[Contents] [Prev] [Next] [Index] [Report an Error]

Creating Unique Usernames

You can configure the extended DHCP application to include additional fields in the username passed to the external AAA authentication service when the DHCP client logs in. This additional information enables you to construct usernames that uniquely identify subscribers.

Note: No authentication is performed if you do not include a username in the authentication configuration; however, the IP address is provided by the local pool if it is configured.

To configure unique usernames, use the username-include statement. You can include any or all of the additional statements.




authentication {



username-include {

circuit-type;

delimiter delimiter-character;

domain-name domain-name-string;

logical-system-name;

mac-address;

option-60;

option-82 <circuit-id>
<remote-id>;

routing-instance-name;

user-prefix user-prefix-string;
}


}

The following list describes the attributes that can be included as part of the username:

circuit-type—The circuit type used by the DHCP client, for example enet.
delimiter—The delimiter character that separates components that make up the concatenated username. The semicolon (;) is not supported as a delimiter character.
domain-name—The client domain name as string. The router adds the @ delimiter to the username.
logical-system-name—The name of the logical system, if the receiving interface is in a logical system.
mac-address—The client MAC address, in a string of the format xxxx.xxxx.xxxx.
option-60—The portion of the option 60 payload that follows the length field.
option-82 <circuit-id> <remote-id>;—The specified contents of the option 82 payload.
- circuit-id—The payload of the Agent Circuit ID suboption.
- remote-id—The payload of the Agent Remote ID suboption.
- Both circuit-id and remote-id—The payloads of both suboptions, in the format: circuit-id[delimiter]remote-id.
- Neither circuit-id or remote-id—The raw payload of the option 82 from the PDU is concatenated to the username.
routing-instance-name—The name of the routing instance, if the receiving interface is in a routing instance.
user-prefix—A string indicating the user prefix.

The router creates the unique username by including the specified additional information in the following order, with the fields separated by a delimiter. The default delimiter is a period (.). You can specify a different delimiter; however, the semicolon character (;) is not allowed.



user-prefix[delimiter]mac-address[delimiter]logical-system-name[delimiter]
routing-instance-name[delimiter]circuit-type[delimiter]option-82[delimiter]
option-60@domain-name

[Contents] [Prev] [Next] [Index] [Report an Error]