aaa-options (PPP Profile)
Syntax
aaa-options aaa-options-name;
Hierarchy Level
[edit access group-profile profile-name ppp ppp-options], [edit dynamic-profiles profile-name interfaces pp0 unit “$junos-interface-unit” ppp-options]
Description
Specify a set of AAA options that is used for authentication
of PPP subscribers. The set of options is defined globally with the aaa-options aaa-options-name statement at the [edit access] hierarchy level.
You can specify the option set in a dynamic PPP profile or in a group profile.
In a dynamic PPP profile—In this case, usernames are examined and modified for dynamic PPP subscribers logging in by means of the subscriber and AAA contexts that are specified in the AAA options set. The option set must include the
access-profile profile-namestatement to specify the name of a subscriber access profile.In a group profile—In this case, usernames are examined and modified for tunneled PPP subscribers on the LNS logging in by means of the subscriber and AAA contexts that are specified in the AAA options set.
When PPP options are configured in both a group profile and a dynamic profile, the dynamic profile configuration takes complete precedence over the group profile when the dynamic profile includes one or more of the PPP options that can be configured in the group profile. Complete precedence means that there is no merging of options between the profiles. The group profile is applied to the subscriber only when the dynamic profile does not include any PPP option available in the group profile.
This meant that aaa-options configured in a group
profile is not applied when the dynamic profile includes any PPP-option,
even when the dynamic profile does not include aaa-options.
Options
| aaa-options-name | Name of the set of options. |
Required Privilege Level
access—To view this statement in the configuration.
access-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 16.2.