Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Configuring a AAA Local Access Profile on the LNS

For some LNS tunnels, you might wish to override the access profile configured at the routing instance that hosts the tunnel with a particular RADIUS server configuration. You can configure a local access profile to do so. You can subsequently use the aaa-access-profile statement to apply the local access profile to a tunnel group or LAC client.

A local access profile applied to a client overrides a local access profile applied to a tunnel group, which in turn overrides the access profile for the routing instance.

To configure a AAA local access profile:

  1. Create the access profile.
    [edit access]user@host# edit profile local-aaa-profile-name
  2. Configure the order of AAA authentication methods.
    [edit access profile local-aaa-profile-name]user@host# set authentication-order radius
  3. Configure the RADIUS server attributes, such as the authentication password.
    [edit access profile local-aaa-profile-name]user@host# set radius-server server-address secret password

Published: 2012-11-29