username-include (Local Authentication)
Syntax
username-include {
circuit-id;
delimiter character;
domain-name name;
mac-address;
remote-id;
}
Hierarchy Level
[edit dynamic-profiles name interfaces $junos-interface-ifd-name unit $junos-interface-unit ppp-options local-authentication]
Description
Configure a local username that authd can use to request authentication for terminated PPP subscribers. This enables the external RADIUS server to pass implementation-specific configuration for successfully authenticated subscribers. Local authentication supports CPEs that do not negotiate authentication protocols in the same dynamic profile as CPEs that use only PAP or CHAP authentication.
The username takes the following format when you use the default delimiter:
mac-address.circuit-id.remote-id@domain-name
Options
| circuit-id | Include the agent circuit identifier (ACI) in the local username. |
| delimiter character | Specify the character that separates components that make up the concatenated username.
|
| domain-name name | Specify the domain name that ends the local username created for the subscribers. The username is sent to RADIUS in the Access-Request message. The string can include the following characters: a through z, A through Z, 0 through 9, “-“, or “.”. |
| mac-address | Include the MAC address from the client PDU in the local username. |
| remote-id | Include the agent remote identifier (ARI) in the local username. |
Required Privilege Level
interface
Release Information
Statement introduced in Junos OS Release 18.2R1.