Subscriber Management and Services
-
Access profile support per VLAN in a domain (MX Series devices and vMX)—Starting in Junos OS Release 21.3R1, you can configure subdomains under a domain map. In a subdomain, you can configure access profiles per VLAN or for a VLAN range. This enhancement gives you the flexibility to differentiate the users in a domain and to provide different services based on the users' profiles.
[See map (Domain Map) and sub-domain.]
-
CHAP password override in RADIUS Access-Request message (MX Series, vMX Series)—Starting in Junos OS Release 21.3R1, you can configure a CHAP password to override the existing password for authenticating any subscriber associated with the domain map. The override CHAP password replaces the CHAP challenge response from the PPPoE client when it attempts authentication.
[See Changing the User Name and Password to Simplify Off-Chassis Provisioning.]
-
NAS-Port-ID format enhancement (MX Series devices and vMX)—In Junos OS Release 21.3R1, we've introduced a new NAS-Port-ID format for RADIUS server access request. The new NAS-Port-ID format is S-VLAN<concatenated 0’s>C-VLAN:S-VLAN-C-VLAN. For a C-VLAN, if the number of digits is less than four, precede it with zeros. For example, NAS-Port-ID for S-VLAN 72 and C-VLAN 82 is 720082:72-82.
You can configure the
fixed-size-inner-tag
andfixed-size-outer-tag
statements at the[edit access profile profile-name radius options nas-port-id-format concatenated-vlan-tags]
hierarchy level.[See nas-port-id-format.]