[Contents] [Prev] [Next] [Index] [Report an Error]

authentication

See the following sections:

authentication (Login)

Syntax

authentication {
(encrypted-password "password" | plain-text-password);
ssh-dsa "public-key";
ssh-rsa "public-key";
}

Hierarchy Level

[edit system login user username]

Release Information

Statement introduced before JUNOS Release 7.4

Description

Authentication methods that a user can use to log in to the router. You can assign multiple authentication methods to a single user.

Options

encrypted-password "password"—Use Message Digest 5 (MD5) or other encrypted authentication. Specify the MD5 or other password. You can specify only one encrypted password for each user.

You cannot configure a blank password for encrypted-password using blank quotation marks (" "). You must configure a password whose number of characters range from 1 through 128 characters and enclose the password in quotation marks.

plain-text-password—Use a plain-text password. The command-line interface (CLI) prompts you for the password and then encrypts it.

ssh-dsa "public-key"—SSH version 2 authentication. Specify the SSH public key. You can specify one or more public keys for each user.

ssh-rsa "public-key"—SSH version 1 and SSH version 2 authentication. Specify the SSH public key. You can specify one or more public keys for each user.

Usage Guidelines

See Configuring User Accounts.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Related Topics

 root-authentication

authentication (Subscriber Access Management)

Syntax

authentication {
password password-string;
username-include {
circuit-type;
delimiter delimiter-character;
domain-name domain-name-string;
logical-system-name;
mac-address;
option-60;
option-82 <circuit-id> <remote-id>;
routing-instance-name;
user-prefix user-prefix-string;
}
}

Hierarchy Level

[edit logical-systems logical-system-name routing-instances routing-instance-name system services dhcp-local-server],
[edit logical-systems logical-system-name routing-instances routing-instance-name system services dhcp-local-server group group-name],
[edit logical-systems logical-system-name system services dhcp-local-server],
[edit logical-systems logical-system-name system services dhcp-local-server group group-name],
[edit logical-systems logical-system-name routing-instances routing-instance-name system services dhcp-local-server],
[edit logical-systems logical-system-name routing-instances routing-instance-name system services dhcp-local-server group group-name],
[edit routing-instances routing-instance-name system services dhcp-local-server],
[edit routing-instances routing-instance-name system services dhcp-local-server group group-name],
[edit system services dhcp-local-server],
[edit system services dhcp-local-server group group-name]

Release Information

Statement introduced in JUNOS Release 9.1.

Description

Configure the parameters the router sends to the external AAA server. A group configuration takes precedence over a global DHCP relay or DHCP local server configuration.

The statements are explained separately.

Usage Guidelines

See Using External AAA Authentication Services.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.