Configuring Remote Template Accounts for User Authentication

By default, the Junos OS uses the remote template accounts when:

• The authenticated user does not exist locally on the router
• The authenticated user’s record in the authentication server specifies local user, or the specified local user does not exist locally on the router

To configure the remote template account, include the user remote statement at the [edit system login] hierarchy level and specify the privileges you want to grant to remote users:

To configure different access privileges for users who share the remote template account, include the allow-commands and deny-commands commands in the authentication server configuration file.

Related Topics

• Overview of Template Accounts for RADIUS and TACACS+ Authentication