Configuring Junos OS to Set Console and Auxiliary Port Properties
Each router or switch has a console port and an auxiliary port for connecting terminals to the router or switch. The console port is enabled by default, and its speed is 9600 baud. The auxiliary port is disabled by default.
To configure the properties for the console and auxiliary ports, include the ports statement at the [edit system] hierarchy level:
By default, the terminal type is unknown, and the terminal speed is 9600 baud for both the console and auxiliary ports. To change the terminal type, include the type statement, specifying a terminal-type of ansi, vt100, small-xterm, or xterm. The first three terminal types set a screen size of 80 columns by 24 lines. The last type, xterm, sets the size to 80 columns by 65 rows.
By default, the console session is not logged out when the data carrier is lost on the console modem control lines. To log out the session when the data carrier on the console port is lost, include the log-out-on-disconnect statement. You can use the show system users command to verify the console session is logged out.
The log-out-on-disconnect statement is not operational on MX80 routers. On MX80 routers you must manually log out from the console with the request system logout u0 command.
By default, terminal connections to the console and auxiliary ports are secure. When you configure the console as insecure, root logins are not allowed to establish terminal connections. In addition, superusers and anyone with a user identifier (UID) of 0 are not allowed to establish terminal connections in multiuser mode when you configure the console as insecure. To disable root login connections to the console and auxiliary ports, include the insecure statement. This option can be used to prevent a user from attempting password recovery by booting into single-user mode, if the user does not know the root password.
To disable console login, include the disable statement. By default, console login is enabled.
For Common Criteria compliance, the console port must be disabled.