Chapter 1

Managing User Authentication and Access

You can use either J-Web Quick Configuration or a configuration editor to manage system functions, including RADIUS and TACACS+ servers, and user login accounts.

This chapter contains the following topics. For more information about system management, see the JUNOS System Basics Configuration Guide.

If the router is operating in a Common Criteria environment, see the Secure

Configuration Guide for Common Criteria and JUNOS-FIPS.

User Authentication Terms on page 3

User Authentication Overview on page 4

Before You Begin on page 8

Managing User Authentication with Quick Configuration on page 8

Managing User Authentication with a Configuration Editor on page 12

Recovering the Root Password on page 21

Securing the Console Port on page 23

Accessing Remote Devices with the CLI on page 24

Configuring Password Retry Limits for Telnet and SSH Access on page 26

User Authentication Terms

Before performing system management tasks, become familiar with the terms defined in Table 5 on page 3.

Table 5: System Management Terms

Term

Definition

Remote Authentication Dial-In User

Authentication method for validating users who attempt to access one or more

Service (RADIUS)

Services Routers by means of Telnet. RADIUS is a multivendor IETF standard

 

whose features are more widely accepted than those of TACACS+ or other

 

proprietary systems. All one-time-password system vendors support RADIUS.

Terminal Access Controller Access

Authentication method for validating users who attempt to access one or more

Control System Plus (TACACS+)

Services Routers by means of Telnet.

User Authentication Terms 3

Page 25
Image 25
Juniper Networks J-Series Managing User Authentication and Access, User Authentication Terms, System Management Terms