J-series™ Services Router Administration Guide

To configure TACACS+ authentication:

1.Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.

2.Perform the configuration tasks described in Table 12 on page 14.

3.If you are finished configuring the network, commit the configuration.

To completely set up TACACS+ authentication, you must create user template accounts and specify a system authentication order.

4.Go on to one of the following procedures:

■To specify a system authentication order, see “Configuring Authentication Order” on page 15.

■To configure a remote user template account, see “Creating a Remote Template Account” on page 19.

■To configure local user template accounts, see “Creating a Local Template Account” on page 20.

Table 12: Setting Up TACACS+ Authentication

Task

J-Web Configuration Editor

Navigate to the System level in the

1.

In the J-Web interface, select

configuration hierarchy.

 

Configuration>View and Edit>Edit

 

 

Configuration.

 

2.

Next to System, click Configure or

 

 

Edit.

CLI Configuration Editor

From the [edit] hierarchy level, enter

edit system

Add a new TACACS+ server

1.

In the Tacplus server box, click Add

 

 

new entry.

 

2.

In the Address box, type the IP

 

 

address of the TACACS+ server:

 

 

172.16.98.24

Set the IP address of the TACACS+ server:

set tacplus-server address 172.16.98.24

Specify the shared secret (password) of the TACACS+ server. The secret is stored as an encrypted value in the configuration database.

Specify the source address to be included in the TACACS+ server requests by the router. In most cases, you can use the loopback address of the router.

In the Secret box, type the shared secret of

Set the shared secret of the TACACS+

the TACACS+ server:

server:

Tacacssecret1

set tacplus-server 172.16.98.24 secret

 

Tacacssecret1

In the Source address box, type the

Set the router's loopback address as

loopback address of the router:

the source address:

10.0.0.1

set tacplus-server 172.16.98.24

 

source-address 10.0.0.1

14■ Managing User Authentication with a Configuration Editor

Page 35 Page 37
Page 36
Image 36
Juniper Networks J-Series manual Setting Up TACACS+ Authentication, 172.16.98.24, Set tacplus-server address, Tacacssecret1
Page 35 Page 37
Top Page Image Contents