Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

root-authentication

 

Syntax

Hierarchy Level

Release Information

Statement introduced before Junos OS Release 7.4.

Statement introduced in Junos OS Release 8.5 for SRX Series.

Statement introduced in Junos OS Release 9.0 for EX Series switches.

Statement introduced in Junos OS Release 11.1 for the QFX Series.

Statement introduced in Junos OS Release 14.1X53-D20 for the OCX Series.

Description

Configure the authentication methods for the root-level user, whose username is root.

You can use the ssh-ecdsa, ssh-ed25519, or ssh-rsa statements to directly configure SSH ECDSA, ED25519, or RSA keys to authenticate root logins. You can configure more than one public key for SSH authentication of root logins as well as for user accounts. When a user logs in as root, the public keys are referenced to determine whether the private key matches any of them.

Options

encrypted-password "password"Specify the MD5 or other password. You can specify only one encrypted password. You cannot configure a blank password using blank quotation marks (" "). You must configure a password whose number of characters range from 1 through 128 characters and enclose the password in quotation marks.
no-public-keysDisable SSH public key-based authentication.
ssh-ecdsa name from fromUse an SSH ECDSA public key. You can specify one or more public keys.
ssh-ed25519 name from fromUse an SSH ED25519 public key. You can specify one or more public keys.
ssh-rsa name from fromUse an SSH RSA public key. You can specify one or more public keys.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.