By default, users are allowed to log in to the router as root through SSH. To control user access through SSH, include the root-login statement at the [edit systems services ssh] hierarchy level:
- [edit system services ssh]
-
root-login (allow | deny | deny-password);
allow—Allows users to log in to the router as root through SSH. The default is allow.
deny—Disables users from logging in to the router as root through SSH.
deny-password—Allows users to log in to the router as root through SSH when the authentication method (for example, RSA) does not require a password.
![]() |
Note: The root-login and protocol-version statements are supported in JUNOS Release 5.0 and later. If you downgrade to a release prior to Release 5.0, the root-login and protocol-version statements are ignored if they are present in the configuration file. |