You can configure the order in which the JUNOS software tries different authentication methods when authenticating peers. For each access attempt, the software tries the authentication methods in order, from first to last.
To configure the authentication order, include the authentication-order statement at the [edit access profile profile-name] hierarchy level:
- [edit access profile profile-name]
-
authentication-order [ authentication-methods ];
In authentication-methods, specify one or more of the following in the preferred order, from first tried to last tried:
![]() |
Note: When you configure the authentication methods for L2TP, only the first configured authentication method is used. |
For L2TP, RADIUS authentication servers are configured at the [edit access radius-server] hierarchy level. For more information about configuring RADIUS authentication servers, see Configuring RADIUS Authentication for L2TP.
If you do not include the authentication-order statement, clients are verified by means of password authentication.