close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Configuring Dynamic VLANs for Subscriber Access Networks
- play_arrow Dynamic VLAN Overview
- play_arrow Configuring Dynamic Profiles and Interfaces Used to Create Dynamic VLANs
- play_arrow Configuring Subscriber Authentication for Dynamic VLANs
- play_arrow Configuring VLANs for Households or Individual Subscribers Using ACI-Based Dynamic VLANs
- play_arrow Configuring VLANs for Households or Individual Subscribers Using Access-Line-Identifier Dynamic VLANs
- play_arrow High Availability for Service VLANs
  - Ethernet OAM Support for Service VLANs Overview
  - Configuring Ethernet OAM Support for Service VLANs with Double-Tagged Customer VLANs
play_arrow Configuring DHCP Subscriber Interfaces
- play_arrow VLAN and Demux Subscriber Interfaces Overview
- play_arrow Configuring Sets of Demux Interfaces to Provide Services to a Group of Subscribers
  - Configuring a Subscriber Interface Using a Set of Static IP Demux Interfaces
  - Configuring a Subscriber Interface Using a Set of Static VLAN Demux Interfaces
- play_arrow Configuring Dynamic Demux Interfaces That are Created by DHCP
  - Configuring Dynamic Subscriber Interfaces Using VLAN Demux Interfaces in Dynamic Profiles
  - Example: Dynamic IP Demux Subscriber Interfaces over Dynamic VLAN Demux Interfaces
- play_arrow Configuring DHCP Subscriber Interfaces over Aggregated Ethernet
- play_arrow Using Dynamic Profiles to Apply Services to DHCP Subscriber Interfaces
  - Dynamic Profile Attachment to DHCP Subscriber Interfaces Overview
  - Attaching Dynamic Profiles to DHCP Subscriber Interfaces or DHCP Client Interfaces
- play_arrow Configuring DHCP IP Demux and PPPoE Demux Interfaces Over the Same VLAN
  - Example: Concurrent Configuration of Dynamic DHCP IP Demux and PPPoE Demux Interfaces over the Same VLAN Demux Interface
- play_arrow Providing Security for DHCP Interfaces Using MAC Address Validation
  - MAC Address Validation for Subscriber Interfaces Overview
  - Configuring MAC Address Validation for Subscriber Interfaces
- play_arrow RADIUS-Sourced Weights for Targeted Distribution
  - RADIUS-Sourced Weights for Interface and Interface Set Targeted Distribution
  - Using RADIUS-Sourced Weights for Interface and Interface Set Targeted Distribution
- play_arrow Verifying Configuration and Status of Dynamic Subscribers
  - Verifying Configuration and Status of Dynamic Subscribers and Associated Sessions, Services, and Firewall Filters
play_arrow Configuring PPPoE Subscriber Interfaces
- play_arrow Configuring Dynamic PPPoE Subscriber Interfaces
- play_arrow Configuring PPPoE Subscriber Interfaces over Aggregated Ethernet Examples
- play_arrow Configuring PPPoE Session Limits
- play_arrow Configuring PPPoE Subscriber Session Lockout
- play_arrow Configuring MTU and MRU for PPP Subscribers
  - Understanding MTU and MRU Configuration for PPP Subscribers
  - Configuring MTU and MRU for PPP Subscribers
- play_arrow Configuring PPPoE Service Name Tables
- play_arrow Changing the Behavior of PPPoE Control Packets
- play_arrow Monitoring and Managing Dynamic PPPoE for Subscriber Access
  - Verifying and Managing Dynamic PPPoE Configuration
play_arrow Configuring MLPPP for Subscriber Access
- play_arrow MLPPP Support for LNS and PPPoE Subscribers Overview
- play_arrow Configuring MLPPP Link Fragmentation and Interleaving
- play_arrow Configuring Inline Service Interfaces for LNS and PPPoE Subscribers
- play_arrow Configuring L2TP Access Client for MLPPP Subscribers
  - Configuring L2TP Client Access to Support MLPPP for Static Subscribers
  - Configuring L2TP Client Access to Support MLPPP for Dynamic Subscribers
- play_arrow Configuring Static MLPPP Subscribers for MX Series
  - Example: Configuring Static LNS MLPPP Subscribers
  - Example: Configuring Static PPPoE MLPPP Subscribers
- play_arrow Configuring Dynamic MLPPP Subscribers for MX Series
  - Example: Configuring Dynamic LNS MLPPP Subscribers
  - Example: Configuring Dynamic PPPoE MLPPP Subscribers
- play_arrow Configuring Dynamic PPP Subscriber Services
- play_arrow Monitoring and Managing MLPPP for Subscriber Access
  - MLPPP Subscriber Accounting Statistics Overview
play_arrow Configuring ATM for Subscriber Access
- play_arrow Configuring ATM to Deliver Subscriber-Based Services
- play_arrow Configuring PPPoE Subscriber Interfaces Over ATM
- play_arrow Configuring ATM Virtual Path Shaping on ATM MICs with SFP
  - Configuring ATM Virtual Path Shaping on ATM MICs with SFP
- play_arrow Configuring Static Subscriber Interfaces over ATM
- play_arrow Verifying and Managing ATM Configurations
  - Verifying and Managing ATM Configurations for Subscriber Access
play_arrow Troubleshooting
- play_arrow Contacting Juniper Networks Technical Support
  - Collecting Subscriber Access Logs Before Contacting Juniper Networks Technical Support
- play_arrow Knowledge Base
  - Juniper Knowledge Base
play_arrow Configuration Statements and Operational Commands
- Junos CLI Reference Overview

list Table of Contents

English

keyboard_arrow_right

Configuring VLAN Interface Username Information for AAA Authentication

date_range 06-Dec-23

arrow_backward

arrow_forward

You can define interface information that is included in the username that is subsequently passed to the external AAA authentication service (for example, RADIUS) when creating dynamic VLANs or stacked VLANs. The AAA authentication service uses this information to authenticate the VLAN or stacked VLAN physical interface. After the interface is authenticated, the AAA service can send the required routing instance values to the system for use in dynamically creating VLAN or stacked VLAN interfaces.

Note:

The following example configures username information on VLANs. However, you can also configure dynamic authentication on stacked VLANs by configuring the same statements at the [edit interfaces interface-name auto-configure stacked-vlan-ranges authentication] hierarchy level.

To configure VLAN interface username information:

Access the authentication stanza for the interface over which you want to configure username information.
```
user@host# edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication
```

Specify the username components that you want the AAA authentication service to use to authenticate the username.

Include the agent circuit identifier (ACI). The ACI is conveyed by the Access-Loop-Circuit-ID TLV in an out-of-band ANCP Port Up message.
```
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include circuit-id
```

Include the circuit type.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include circuit-type

Specify the character used as the delimiter between the concatenated components of the username.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include delimiter delimiter-character

Specify the domain name that is concatenated with the username.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include domain-name domain-name-string

Include the interface name and VLAN tags.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include interface-name

Include the client hardware address (chaddr) from the incoming DHCP discover packet.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include mac-address

Include the option 18 (Interface-ID) information that was received in the innermost DHCPv6 Relay-Forward message header.
```
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include option-18
```
Include the option 37 (DHCPv6 Relay Agent Remote-ID) information that was received in the innermost DHCPv6 Relay-Forward message header.
```
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include option-37
```
Include the option 82 information from the client PDU. For DHCPv4, optionally include suboption 1 (Agent Circuit ID) or suboption 2 (Agent Remote ID).
```
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include option-82 <circuit-id> <remote-id>
```

Include the user-defined RADIUS realm string to direct the authentication request to a profile that does not allocates addresses.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include radius-realm radius-realm-string

Include the agent remote identifier (ARI). The ARI is conveyed by the Access-Loop-Remote-ID TLV in an out-of-band ANCP Port Up message
```
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include remote-id
```

Specify a user prefix.

content_copy zoom_out_map
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include user-prefix user-prefix-string

Include the subscriber VLAN tags. You can use this option instead of the interface-name option when the outer VLAN tag is unique across the system and you do not need the underlying physical interface name to be part of the format.
```
[edit interfaces ge-0/0/0 auto-configure vlan-ranges authentication username-include]
user@host# set username-include vlan-tags
```

arrow_backward PREVIOUS Configuring Subscriber Packet Types to Trigger VLAN Authentication

NEXT arrow_forward Using DHCP Option 82 Suboptions in Authentication Usernames for Autosense VLANs

Broadband Subscriber VLANs and Interfaces User Guide

Configuring VLAN Interface Username Information for AAA Authentication

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Broadband Subscriber VLANs and Interfaces User Guide

Configuring VLAN Interface Username Information for AAA Authentication

Related Documentation

Stay in touch