map (Domain Map)
Syntax
map domain-map-name { aaa-logical-system logical-system-name { aaa-routing-instance routing-instance-name; } aaa-routing-instance routing-instance-name; access-profile profile-name; address-pool pool-name; dynamic-profile profile-name; strip-domain; strip-username (left-to-right | right-to-left); sub-domain name { ( aaa-logical-system name {aaa-routing-instance (default | name) } | aaa-routing-instance (default | name)); ( target-logical-system name {target-routing-instance (default | name) } | target-routing-instance (default | name)); access-profile access-profile; address-pool address-pool; dynamic-profile dynamic-profile; override-chap-password override-chap-password; override-password override-password; qualifier { vlan-id-list [ vlan-id-list ... ]; } strip-domain; strip-username (left-to-right | right-to-left); tunnel-profile tunnel-profile; using-user-password; } override-password password; target-logical-system logical-system-name { target-routing-instance routing-instance-name; } target-routing-instance routing-instance-name; tunnel-profile profile-name; tunnel-switch-profile profile-name; }
Hierarchy Level
[edit access domain]
Description
Specify the domain map to use to map options and parameters to subscriber sessions based on the subscriber domain.
Options
domain-map-name
—Name of the domain map. The name is the same as the subscriber
domain to which it will apply. For example, for the username user1@example.com
, the domain map name is example.com
.
*
—Use the asterisk wildcard character in thedomain-map-name
to specify a wildcard domain map, which enables mapping based on a partial match (for example,xyz*northern.example.com
).The router performs the wildcard lookup when there is no exact match for the subscriber domain name. The wildcard can appear anywhere within the domain name string, and can match zero or more characters. The asterisk is the only wildcard character, and only one wildcard is supported in a domain map name. If you include multiple asterisks, the first asterisk is treated as the wildcard character and the others are treated as non-wildcard characters.default
—Use a domain map name ofdefault
to specify the domain map that the router uses when there is no exact or wildcard match for the domain or realm name in the subscriber username.none
—Use a domain map name ofnone
to specify the domain map the router uses when a subscriber username does not have a domain or realm name.
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 10.4.
override-password
and strip-username
options
introduced in Junos OS Release 15.1.
wildcard character introduced in Junos OS Release 16.1.
sub-domain
option introduced in Junos OS Release
21.3R1.