Configuring Simple Authentication

To configure simple authentication:

1. Specify a vty line or a range of vty lines on which you want to enable the password.

   host1(config)#line vty 8 13

   host1(config-line)#

2. Specify the password for the vty lines.

   host1(config-line)#password 0 mypassword

3. Enable login authentication on the lines.

   host1(config-line)#login

4. Display your vty line configuration.

   host1#show line vty 8

   no access-class in

   data-character-bits 8

   exec-timeout never

   exec-banner enabled

   motd-banner enabled

   login-timeout 30 seconds

line

• Use to specify the vty line(s) on which you want to enable the password.
• You can set a single line or a range of lines. The range is 0–29.
• Example

  host1(config)#line vty 8 13

• Use the no version to remove a vty line or a range of lines from your configuration; users will not be able to run Telnet, SSH, or FTP to lines that you remove. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 29. You cannot remove lines 0 through 4.
• See line.

login

• Use to enable password checking at login.
• The default setting is to enable a password.
• Example

  host1(config-line)#login

• Use the no version to disable password checking and allow access without a password.
• See login.

password

• Use to specify a password on a single line or a range of lines.
• If you enable password checking but do not configure a password, the system will not allow you to access virtual terminals.
• Specify a password in plain text (unencrypted) or cipher text (encrypted). In either case, the system stores the password as encrypted.
• Use the following keywords to specify the type of password you will enter:
  • 0 (zero)—Unencrypted password
  • 5—Secret
  • 7—Encrypted password

Note: To use an encrypted password or a secret, you must follow the procedure in Setting Basic Password Parameters to obtain the encrypted password or secret. You cannot create your own encrypted password or secret; you must use a system-generated password or secret.

• Example 1 (unencrypted password)

  host1(config-line)#password 0 mypassword

• Example 2 (secret)

  host1(config-line)#password 5 bcA";+1aeJD8)/[1ZDP6

• Example 3 (encrypted password)

  host1(config-line)#password 7 dq]XG`,%N"SS7d}o)_?Y

• Use the noversion to remove the password. By default, no password is specified.
• See password.

show line vty

• Use to display the configuration of a vty line.
• Field descriptions
  • access-class—Access-class associated with the vty line
  • data-character-bits—Number of bits per character
    • 7—Setting for the standard ASCII set
    • 8—Setting for the international character set
  • exec-timeout—Time interval that the terminal waits for expected user input
    • Never—Indicates that there is no time limit
  • exec-banner—Status for the exec banner: enabled or disabled. This banner is displayed by the CLI after user authentication (if any) and before the first prompt of a CLI session.
  • motd-banner—Status for the message of the day (MOTD) banner: enabled or disabled. This banner is displayed by the CLI when a connection is initiated.
  • login-timeout—Time interval during which the user must log in.
    • Never—Indicates that there is no time limit
• Example

  host1#show line vty 0
  no access-class in
  data-character-bits 8
  exec-timeout 3w 3d 7h 20m 0s
  exec-banner enabled
  motd-banner enabled
  login-timeout 30 seconds

• See show line vty.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.