Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

root-login

 

Syntax

Hierarchy Level

Release Information

Statement introduced before Junos OS Release 7.4.

Statement introduced in Junos OS Release 9.0 for EX Series switches.

Statement introduced in Junos OS Release 11.1 for the QFX Series.

Statement introduced in Junos OS Release 14.1X53-D20 for OCX Series switches.

Description

Control user access through SSH.

Default

root-login deny-password is the default for most systems.

Starting in Junos release 17.4R1 for MX Series routers, the default for root-login is deny. In previous Junos releases, the default setting for the MX240, MX480, MX960, MX2010 and MX2020 was allow.

Options

allowAllow users to log in to the router or switch as root through SSH.
denyDisable users from logging in to the router or switch as root through SSH.
deny-passwordAllow users to log in to the router or switch as root through SSH when the authentication method (for example, RSA authentication) does not require a password.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.