Technical Documentation

Configuring an Authentication Password for VLAN or Stacked VLAN Ranges

You can specify an authentication password for dynamically created VLAN or stacked VLAN interfaces at the [edit interfaces interface-name auto-configure vlan-ranges authentication] or [edit interfaces interface-name auto-configure stacked-vlan-ranges authentication] hierarchy level. This password is sent to the external AAA authentication server for subscriber authentication.

Note: You must configure the username-include statement to enable the use of authentication. The password statement is not required and does not cause the interface to use authentication if the username-include statement is not included.

To configure an authentication password:

  1. Access the interface over which you want to create dynamic VLANs.
    user@host# edit interfaces ge-0/0/0
  2. Edit the VLAN auto-configure stanza.
    [edit interfaces ge-0/0/0]user@host# edit auto-configure
  3. Edit the vlan-ranges or stacked-vlan-ranges stanza.
    [edit interfaces ge-0/0/0 auto-configure]user@host# edit vlan-ranges

    or

    [edit interfaces ge-0/0/0 auto-configure]user@host# edit stacked-vlan-ranges
  4. Edit the VLAN authentication stanza.
    [edit interfaces ge-0/0/0 auto-configure vlan-ranges]user@host# edit authentication
  5. Specify a password that is sent to the external AAA authentication server for subscriber authentication.
    [edit interfaces ge-0/0/0 auto-configure vlan-ranges]user@host# set password PSSWD1

Published: 2010-04-15