close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

aaa

date_range 08-Nov-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
aaa {
    access-profile access-profile {
        config-payload-password config-payload-password;
    }
    client {
        password;
        username;
    }
    use-routing-instance-address;
    no-push-to-identity-management;
}

Hierarchy Level

content_copy zoom_out_map
[edit security ike gateway gateway-name]

Description

Specify that extended authentication is performed in addition to IKE Phase 1 authentication for remote users trying to access a VPN tunnel. This authentication can be through Extended Authentication (XAuth) or Extensible Authentication Protocol (EAP). Include a previously created access profile, configured with the edit access profile statement, to specify the access profile to be used for authentication information.

Options

`access-profile` `profile-name`	Name of the previously created access profile to use for extended authentication for remote users trying to access a VPN.
`config-payload-password`	Specify common client password for IKEv2 configuration payload with 1 to 128 characters.
`client`	Specify an AAA client uername and password for each configured authenticator that is allowed to request authentications for supplicants. `password`—AAA client password with 1 to 128 characters. `username`—AAA client username with 1 to 128 characters.
`no-push-to-identity-management`	(Optional) Specify the option to prevent pushing of the connection states to the identity management server.
`use-routing-instance-address`	Specify an AAA address from pool configured in routing-instance of type virtual-router.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 15.1X49-D80.

config-payload-password option added in Junos OS Release 20.1R1.

no-push-to-identity-management option added in Junos OS Release 24.4R1.

arrow_backward PREVIOUS 802.3ad

NEXT arrow_forward aaa-access-profile (L2TP LNS)

Junos CLI Reference

ON THIS PAGE

aaa

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

aaa

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch