Example: Configuring a Default Client Group for All Users

This example shows how to configure a default client group for all users in a profile.

• Requirements
• Overview
• Configuration
• Verification

Requirements

Before you begin:

Create an access profile called Managers.

Overview

This example shows how to configure the default client group for all users in a profile called Managers. If a client belonging to the Managers profile does not have any group information configured, then the client automatically inherits the groups M1 and M2.

Configuration

Step-by-Step Procedure

To configure a default client group for all users in a profile:

1. Configure client groups in the session options.
   
   

   [edit]

   
   
   

   user@host# set access profile Managers session-options client-group M1

   
   
   

   user@host# set access profile Managers session-options client-group M2
2. Confirm your configuration by entering the show access command from configuration mode. If the output does not display, repeat the instructions in this example to correct it.
   
   

   [edit]

   
   
   

   user@host# show access
3. If you are done configuring the device, commit the configuration.
   
   

   [edit]

   
   
   

   user@host# commit

Verification

Verify the configuration by entering the show access command.

Related Topics

• JUNOS Software Feature Support Reference for SRX Series and J Series Devices
• Understanding Client Groups for Firewall Authentication