Supported Platforms
Configuring VLAN Interface Username Information for AAA Authentication
You can define interface information that is included in the username that is subsequently passed to the external AAA authentication service (for example, RADIUS) when creating dynamic VLANs or stacked VLANs. The AAA authentication service uses this information to authenticate the VLAN or stacked VLAN physical interface. After the interface is authenticated, the AAA service can send the required routing instance values to the system for use in dynamically creating VLAN or stacked VLAN interfaces.
 | Note: The following example configures username information on VLANs. However, you can also configure dynamic authentication on stacked VLANs by configuring the same statements at the [edit interfaces interface-name auto-configure stacked-vlan-ranges authentication] hierarchy level. |
To configure VLAN interface username information:
- Access the interface over which you want to configure
username information.user@host# edit interfaces ge-0/0/0
- Edit the auto-configure stanza.[edit interfaces ge-0/0/0]user@host# edit auto-configure
- Edit the vlan-ranges stanza. [edit interfaces ge-0/0/0 auto-configure]user@host# edit vlan-ranges
- Edit the authentication stanza.[edit interfaces ge-0/0/0 auto-configure vlan-ranges]user@host# edit authentication
- Edit the username-include stanza.[edit interfaces ge-0/0/0 auto-configure vlan-ranges]user@host# edit username-include
- Specify the username statements that you want the AAA
authentication service to use to authenticate the username.[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]user@host# set delimiter
