Technical Documentation

Configuring MS-CHAPv2 to Provide Password-Change Support (CLI Procedure)

JUNOS software for EX-series switches enables you to configure the Microsoft Corporation implementation of the Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2) on the switch to provide password-change support. Configuring MS-CHAPv2 on the switch provides users accessing a switch the option of changing the password when the password expires, is reset, or is configured to be changed at next login.

See RFC 2433, Microsoft PPP CHAP Extensions, for information about MS-CHAP.

Before you configure MS-CHAPv2 to provide password-change support, ensure that you have configured the following:

  • Configured RADIUS server authentication.

To configure MS-CHAP-v2, specify the following:

[edit system radius-options]

user@switch# set password-protocol mschap-v2

    You must have the required access permission on the switch in order to change your password.