Navigation
Configuring a AAA Local Access Profile on the LNS
For some LNS tunnels, you might wish to override the access profile configured at the routing instance that hosts the tunnel with a particular RADIUS server configuration. You can configure a local access profile to do so. You can subsequently use the aaa-access-profile statement to apply the local access profile to a tunnel group or LAC client.
A local access profile applied to a client overrides a local access profile applied to a tunnel group, which in turn overrides the access profile for the routing instance.
To configure a AAA local access profile:
- Create the access profile.[edit access]user@host# edit profile local-aaa-profile-name
- Configure the order of AAA authentication methods.[edit access profile local-aaa-profile-name]user@host# set authentication-order radius
- Configure the RADIUS server attributes, such as the authentication
password.[edit access profile local-aaa-profile-name]user@host# set radius-server server-address secret password