Understanding User Authentication Methods

Junos OS supports three methods of user authentication: local password authentication, Remote Authentication Dial-In User Service (RADIUS), and Terminal Access Controller Access Control System Plus (TACACS+).

With local password authentication, you configure a password for each user allowed to log into the device.

RADIUS and TACACS+ are authentication methods for validating users who attempt to access the device using Telnet. Both are distributed client/server systems—the RADIUS and TACACS+ clients run on the device, and the server runs on a remote network system.

You can configure the device to use RADIUS or TACACS+ authentication, or both, to validate users who attempt to access the device. If you set up both authentication methods, you also can configure which method the device will try first.

Related Documentation

• Understanding User Accounts
• Understanding Login Classes
• Understanding Template Accounts
• Junos OS Security Configuration Guide 
• Junos OS System Basics Configuration Guide 
• Junos OS Feature Support Reference for SRX Series and J Series Devices