Configuring MS-CHAPv2 for Password-Change Support

The JUNOS software enables you to configure Microsoft’s implementation of the Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2) on the router for password-change support. This feature provides users accessing a router the option of changing the password when the password expires, is reset, or is configured to be changed at next logon.

Before you configure MS-CHAPv2 for password-change support, ensure that you have done the following:

• Configured RADIUS server authentication parameters. For more information, see Configuring RADIUS Authentication.
• Set the first tried option in the authentication order to RADIUS server. For more information, see Configuring the Authentication Order.

To configure MS-CHAP-v2, include the following statements at the [edit system radius-options] hierarchy level:

For an example configuration, see Example: Configuring MS-CHAPv2 on the Router.