[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the Root Login

By default, users are allowed to log in to the router as root through SSH. To control user access through SSH, include the root-login statement at the [edit systems services ssh] hierarchy level:

[edit system services ssh]
root-login (allow | deny | deny-password);

allow—Allows users to log in to the router as root through SSH. The default is allow.

deny—Disables users from logging in to the router as root through SSH.

deny-password—Allows users to log in to the router as root through SSH when the authentication method (for example, RSA) does not require a password.

Note: The root-login and protocol-version statements are supported in JUNOS Release 5.0 and later. If you downgrade to a release prior to Release 5.0, the root-login and protocol-version statements are ignored if they are present in the configuration file.


[Contents] [Prev] [Next] [Index] [Report an Error]