Configuring MS-CHAPv2 to Provide Password-Change Support (CLI Procedure)
Junos OS for EX Series switches enables you to configure the Microsoft Corporation implementation of the Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2) on the switch to provide password-change support. Configuring MS-CHAPv2 on the switch provides users accessing a switch the option of changing the password when the password expires, is reset, or is configured to be changed at next login.
See RFC 2433 at , Microsoft PPP CHAP Extensions, for information about MS-CHAP.
Before you configure MS-CHAPv2 to provide password-change support, ensure that you have:
- Configured RADIUS server authentication. Configure users on the authentication server and set the first-tried option in the authentication order to radius. See Example: Connecting a RADIUS Server for 802.1X to an EX Series Switch.
To configure MS-CHAPv2, specify the following:
[edit system radius-options]user@switch# set password-protocol mschap-v2You must have the required access permission on the switch in order to change your password.
Related Topics
- Managing Users (J-Web Procedure)
- For more about configuring user access, see the Junos OS Access Privilege Configuration Guide at http://www.juniper.net/techpubs/software/junos/index.html.
