[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring MS-CHAPv2 for Password-Change Support

The JUNOS software enables you to configure Microsoft’s implementation of the Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2) on the router for password-change support. This feature provides users accessing a router the option of changing the password when the password expires, is reset, or is configured to be changed at next logon.

Before you configure MS-CHAPv2 for password-change support, ensure that you have done the following:

Configured RADIUS server authentication parameters. For more information, see Configuring RADIUS Authentication.
Set the first tried option in the authentication order to RADIUS server. For more information, see Configuring the Authentication Order.

To configure MS-CHAP-v2, include the following statements at the [edit system radius-options] hierarchy level:



[edit system radius-options]
password-protocol mschap-v2;

For an example configuration, see Example: Configuring MS-CHAPv2 on the Router.

[Contents] [Prev] [Next] [Index] [Report an Error]