Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
ContentIndex
  
[+] Expand All
[-] Collapse All

No index entries found.

priority (Security User Identification)

Syntax

authentication-source {active-directory priority priority; aruba-clearpass priority priority;firewall-authentication priority priority;local-authentication-table priority priority;unified-access-control priority priority;}

Hierarchy Level

[edit security user-identification]

Release Information

Statement introduced in Junos OS Release 12.3X48-D30.

Description

Set the lookup priority to identify the order in which the SRX Series device checks its configured authentication tables for user authentication information. Authentication tables are searched in order based on their priority setting in which lowest value takes precedence.

For the integrated ClearPass authentication and enforcement feature, the SRX Series device must be configured to search the ClearPass authentication table first.

Note: Note that both the authentication source, Aruba ClearPass, and the SRX Series ClearPass authentication table are both referred to as aruba-clearpass in the CLI and its output.

You need to set this value only if the local authentication table, whose default value is 100, also resides on the Packet Forwarding Engine. In that case, you must configure a higher priority value, such as 120, for the local authentication table.

Options

aruba-clearpass priority

By default, the authentication table search priority for the ClearPass authentication table is 110.

Range: 1 through 65535.

Default values for other authentication tables are:

  • Local authentication table: 100
  • Active Directory (AD) table: 125
  • UAC authentication table: 150
  • Firewall authentication table: 200

Required Privilege Level

  • security—To view this statement in the configuration.
  • security-control—To add this statement to the configuration.

Modified: 2016-05-01