Junos
Highlighted
Junos

Using radius username and not option-82

‎02-01-2019 10:09 AM

If I use option-82 to subscriber authentication is possible that I use like the username the information reurned from radius intead of the juniper  dhcp-local-server authentication username-include option-82 ?

I have for efect of validation radius lines of informations like:

username option32

jonh        FTTHxxxx:0:1

mary       FTTHyyyy:0:1

 

A dhcp client CPE always send option-82 circuit-id like FTTHxxxx:0:1. So just radius have the friendly username.

 

If I use show subscribers in juniper I would like to show my usernames like:

jonh

mary

 

insted of:

FTTHxxxx:0:1

FTTHyyyy:0:1

 

Is that possible?

 

2 REPLIES 2
Highlighted
Junos

Re: Using radius username and not option-82

‎02-02-2019 03:45 AM

Hi Hugelo,

 

Think this could be done using username-include and user-prefix like:

 

authentication {
username-include {
user-prefix jonh;
}
}
 
Example: 
set forwarding-options dhcp-relay group test authentication username-include jonh

 

Reference:

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/dhcp-extended-local-serv...

 

Can be used perhaps in conjuction with overriding option-82 i.e.:
set forwarding-options dhcp-relay overrides

 

Reference:

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/dhcp-subscriber-access-d...

 

 

Hope this helps.

 

Regards,

-r.

--------------------------------------------------

If this solves your problem, please mark this post as "Accepted Solution."
Kudos are always appreciated :).

Highlighted
Junos

Re: Using radius username and not option-82

‎02-02-2019 04:32 AM

Hi,

 

But how to include a user-prefix if I don't know about jonh user, just radius knows about that and are thousand of users so is not possible to create a prefix for each user.

 

Feedback