Client Application Can Log In on C-Series Controllers

The client application must be able to log in to each C-series Controller on which it establishes NETCONF sessions. The following instructions explain how to create a login account for the application. Alternatively, you can skip this section and enable authentication through RADIUS or TACACS+. For instructions, see SRC-PE Getting Started Guide.

To determine if a login account exists, enter SRC command-line interface (CLI) configuration mode on the C-series Controller and issue the following commands:

If the appropriate account does not exist, perform the following steps:

1. Include the user statement at the [edit system login] hierarchy level. Specify a login class that has the permissions required for all actions to be performed by the application. You can also include the optional full-name and uid statements. For detailed information about creating user accounts, see SRC-PE Getting Started Guide.

   [edit system login]

   user@host# set user user-name class class

2. (Optional) Commit the configuration. Alternatively, you can wait until you have added the statements that satisfy all prerequisites (see NETCONF Service over SSH Is Enabled).

   [edit system login]

   user@host# commit

3. Repeat the preceding steps on each C-series Controller where the client application establishes NETCONF sessions.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.