Supported Platforms
Specifying an Access Profile in a Domain Map
You use access profiles to specify the access rules and options (for example, the RADIUS authentication server and attributes) that the router applies to subscriber sessions. The domain map feature enables you to apply a specific access profile for subscribers in a particular domain.
Access profiles can be specified or modified in several different ways. If conflicts occur, the router applies the access profiles based on the precedence rules shown in Table 1.
Table 1: Precedence Rules for Applying Access Profiles
Precedence (High to Low) | How the Access Profile Is Applied |
|---|---|
1 | Specified by the RADIUS Redirect-VRouter-Name attribute (VSA 26-25) |
2 | Specified in the domain map configuration stanza |
3 | Indirectly specified in the domain map configuration stanza by the AAA logical system/routing instance mapping |
4 | Specified in the client configuration stanza |
5 | Specified in the logical system/routing instance configuration stanza |
To include an access profile in a domain map:
- Specify the domain map you want to configure.[edit access]user@host# edit domain map domain-map-name
- Specify the access profile you want to include in the
domain map.[edit access domain map domain-map-name]user@host# set access-profile profile-name
