Juniper Networks J-Series Managing User Authentication and Access

Chapter 1
Managing User Authentication and Access
You can use either J-Web Quick Configuration or a configuration editor to manage
system functions, including RADIUS and TACACS+ servers, and user login accounts.
This chapter contains the following topics. For more information about system
management, see the JUNOS System Basics Configuration Guide.
If the router is operating in a Common Criteria environment, see the Secure
Configuration Guide for Common Criteria and JUNOS-FIPS.
■User Authentication Terms on page 3
■User Authentication Overview on page 4
■Before You Begin on page 8
■Managing User Authentication with Quick Configuration on page 8
■Managing User Authentication with a Configuration Editor on page 12
■Recovering the Root Password on page 21
■Securing the Console Port on page 23
■Accessing Remote Devices with the CLI on page 24
■Configuring Password Retry Limits for Telnet and SSH Access on page 26
User Authentication Terms
Before performing system management tasks, become familiar with the terms defined
in Table 5 on page 3.
Table 5: System Management Terms
DefinitionTerm
Authentication method for validating users who attempt to access one or more
Services Routers by means of Telnet. RADIUS is a multivendor IETF standard
whose features are more widely accepted than those of TACACS+ or other
proprietary systems. All one-time-password system vendors support RADIUS.
Remote Authentication Dial-In User
Service (RADIUS)
Authentication method for validating users who attempt to access one or more
Services Routers by means of Telnet.
Terminal Access Controller Access
Control System Plus (TACACS+)
User Authentication Terms ■3