AAA Profile Configuration Overview

An AAA profile is a set of characteristics that act as a pattern that you can assign to domain names. Once you create an AAA profile, you can map it between a PPP client’s domain name and certain AAA services on given interfaces. Using AAA profiles, you can:

• Allow or deny a domain name access to AAA authentication
• Map the original domain name to the mapped domain name for domain name lookup
• Use domain name aliases
• Force tunneling whenever a domain map contains tunnel attributes
• Manually set the NAS-Port-Type attribute (RADIUS attribute 61) for ATM and Ethernet interfaces
• Set the Service-Description attribute (RADIUS attribute 26-53)

An AAA profile contains a set of commands to control access for the incoming PPP subscriber. If no AAA profile is used, AAA continues as normal. The user’s name and domain name are not changed as a result of an AAA profile mapping.

Note: There are two domain names with special meaning. The domain name none indicates that there is no domain name present in the subscriber’s name. The domain name default indicates that no other match occurs.