Technical Documentation

Downloads
Junos OS System Basics Configuration Guide

User Access Management, Junos OS Release 10.3

The Junos OS enables you to configure user access and authentication features at the edit system hierarchy level of the CLI. This page contains information about configuring user access and authentication described in the JUNOS® OS System Basics Configuration Guide.

Junos® OS - Basic System Configuration, Release 10.3

Overview
Configuration
Administration
Troubleshooting

User Access Overview

Junos OS Login Classes Overview

Junos OS User Accounts Overview

Junos-FIPS Crypto Officer and User Accounts Overview

Junos OS Access Privilege Levels Overview

Using Regular Expressions on a TACACS+ or RADIUS Server to Allow or Deny Access to Commands

Junos OS Authentication Order for RADIUS, TACACS+, and Password Authentication

User Authentication Overview

Junos OS User Authentication Methods

Special Requirements for Junos OS Plain-Text Passwords

Overview of Template Accounts for RADIUS and TACACS+ Authentication

Junos OS Authentication Methods for Routing Protocols

Configuring User Access

Defining Junos OS Login Classes

Configuring Junos OS User Accounts

Limiting the Number of User Login Attempts for SSH and Telnet Sessions

Configuring Time-Based User Access

Configuring Access Privilege Levels

Specifying Access Privileges for Junos OS Operational Mode Commands

Specifying Access Privileges for Junos OS Configuration Mode Hierarchies

Configuring the Timeout Value for Idle Login Sessions

Configuring Remote Template Accounts for User Authentication

Configuring Local User Template Accounts for User Authentication

Configuring the Junos OS Authentication Order for RADIUS, TACACS+, and Local Password Authentication

Using Junos OS to Configure Logical System Administrators

Configuring the Junos OS to Display a System Login Message

Configuring the Junos OS to Display a System Login Announcement

Using Junos OS to Configure System Alarms to Appear Automatically on J Series Routers and EX Series Ethernet Switches

Configuring RADIUS and TACACS+ System Authentication

Configuring RADIUS Authentication

Configuring TACACS+ Authentication

Configuring RADIUS System Accounting

Configuring TACACS+ System Accounting

Examples

Example: Creating Login Classes

Example: Defining User Login Accounts

Example: Configuring User Accounts

Example: Limiting the Number of Login Attempts for SSH and Telnet Sessions

Examples: Configuring Time-Based User Access

Example: Configuring Access Privilege Levels

Example: Configuring Access Privileges for Operational Mode Commands

Example: Defining Access Privileges for Configuration Mode Hierarchies

Example: Configuring System Authentication for RADIUS, TACACS+, and Password Authentication

Configuration Statements

[edit system] Hierarchy Level

accounting-port

allow-configuration

authentication (Login)

authentication-order

class (Assigning a Class to an Individual User)

class (Defining Login Classes)

deny-configuration

minimum-changes

password (Login)

port (RADIUS Server)

port (TACACS+ Server)

server (RADIUS Accounting)

server (TACACS+ Accounting)

single-connection

source-address (NTP, RADIUS, System Logging, or TACACS+)

tacplus-options

Routine Monitoring

show system users

test access profile

test access radius-server

Knowledge Base
http://kb.juniper.net/

Published: 2010-07-12

|

|