Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


username-include (Interfaces)


Hierarchy Level


Configure the username that the router passes to the external AAA server. You must include at least one of the optional statements for the username to be valid. If you do not configure a username, the router accesses the local authentication service only and does not use external authentication services, such as RADIUS.

The username takes the format user-prefix mac-address circuit-type circuit-id remote-id option–82 interface-name domain-name radius-realm. By default, each component is separated by a period (.), but you can specify a different delimiter with the delimiter statement.



Include the subscriber session VLAN tags in the username for interactions with an external authority. Both single-tagged and double-tagged VLANs are supported: The tags are added in the format outer-vlan-tag-inner-vlan-tag. The outer tag is always included; the inner tag is included for double-tagged VLANs.

You can use this option instead of the interface-name option when the outer VLAN tag is unique across the system and you do not need the underlying physical interface name to be part of the format.

The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 10.0.

vlan-tags option added in Junos OS Release 18.3R1 on MX Series routers.