User Profile Configuration

This section describes how to configure locally defined user profiles for subscriber authentication. While external servers such as RADIUS are typically used, the system also supports local authentication using these profiles. User profiles allow you to define credentials and session parameters directly on the device. This provides an alternative authentication method, especially useful in small deployments or testing scenarios.

Configuring User Profile

Syntax:

set access user-profile <user-name> l2tp-pool-name <l2tp-pool-name>
set access user-profile <user-name> password-encrypted-text <password-encrypted-text>
set access user-profile <user-name> password-plain-text <password-plain-text>
set access user-profile <user-name> tunnel-type [PPPoE | L2TP]

The following command and options are used to configure a user profile. A user profile also includes authentication details.

Attribute Description

-

Without any option, the command sets a user profile.

user-name

Specifies the username for which the user profile is configured.

l2tp-pool-name

Associates an L2TP pool used for assigning tunnel endpoints to the user.

password-encrypted-text

Specifies the user password in encrypted form for secure authentication.

password-plain-text

Specifies the user password in plain text, which is internally encrypted before storage.

tunnel-type

Specifies the tunnel type used for the subscriber session (for example, L2TP). Default: PPPoE. Values: PPPoE or L2TP.

The following configuration shows the user name specified as 'user@rtbrick.com'. The password-encrypted-text attribute enables you to set the user’s password in an encrypted format. The tunnel-type is set to PPPoE.

supervisor@switch: cfg> show config access user-profile user@rtbrick.com
{
  "rtbrick-config:user-profile": {
    "user-name": "user@rtbrick.com",
    "password-encrypted-text": "$243a1341f44f54888cdd385b9f40513f1",
    "tunnel-type": "PPPoE"
  }
}

api  To access the RESTCONF API that corresponds to this CLI, click here.