[Contents] [Prev] [Next] [Index] [Report an Error]

Using Remote Template Accounts

By default, the JUNOS software uses the remote template accounts when:

The authenticated user does not exist locally on the router
The authenticated user’s record in the authentication server specifies local user, or the specified local user does not exist locally on the router

To configure the remote template account, include the user remote statement at the [edit system login] hierarchy level and specify the privileges you want to grant to remote users:



[edit system login]

user remote {
full-name "All remote users";
uid uid-value;
class class-name;
}

To configure different access privileges for users who share the remote template account, include the allow-commands and deny-commands commands in the authentication server configuration file. For information about how to define access privileges on the authentication server, see Configuring Juniper Networks Vendor-Specific RADIUS Attributes and Configuring Juniper Networks Vendor-Specific TACACS+ Attributes.

[Contents] [Prev] [Next] [Index] [Report an Error]