TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

root-authentication

Syntax

root-authentication {(encrypted-password "password" | load-key-password URL | plain-text-password);ssh-dsa "public-key";ssh-rsa "public-key";}

Hierarchy Level

[edit system]

Release Information

Statement introduced in Junos OS Release 11.1 for the QFX Series.

Statement introduced in Junos OS Release 14.1X53-D20 for the OCX Series.

Description

Configure the authentication methods for the root-level user, whose username is root.

Options

encrypted-password "password"— Specify the MD5 or other encrypted authentication password. You can specify only one encrypted password.

You cannot configure a blank password for the encrypted-password option using blank quotation marks (" "). You must configure a password of 1 through 128 characters and enclose the password in quotation marks.

Caution: Do not use the encrypted-password option unless the password is already encrypted, and you are entering the encrypted version of the password. If you commit the encrypted-password option with a plain-text password or with blank quotation marks (" "), you will not be able to log in to the device as root, and you will need to use the password recovery process.

plain-text-password—Plain-text password. The CLI prompts you for the password and then encrypts it. The CLI displays the encrypted version, and the software places the encrypted version in its user database. You can specify only one plain-text password.

ssh-dsa "public-key"—SSH version 2 authentication. Specify the DSA (SSH version 2) public key. You can specify one or more public keys.

ssh-rsa "public-key"—SSH version 2 authentication. Specify the RSA SSH version 2) public key. You can specify one or more public keys.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.