Juniper Networks J-Series manual Creating a Local Template Account

J-series™ Services Router Administration Guide

Creating a Local Template Account

You can create a local template that is applied to users authenticated by RADIUS or TACACS+ that are assigned to the local template account. You use local template accounts when you need different types of templates. Each template can define a different set of permissions appropriate for the group of users who use that template.

The procedure provided in this section creates a sample user named admin that belongs to the superuser login class.

To create a local template account:

1.Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.

2.Perform the configuration tasks described in Table 17 on page 20.

3.If you are finished configuring the network, commit the configuration.

To completely set up RADIUS or TACACS+ authentication, you must configure at least one RADIUS or TACACS+ server and specify a system authentication order

4.Go on to one of the following procedures:

■To configure a RADIUS server, see “Setting Up RADIUS Authentication” on page 12.

■To configure a TACACS+ server, see “Setting Up TACACS+ Authentication” on page 13.

■To configure a system authentication order, see “Configuring Authentication Order” on page 15.

Table 17: Creating a Local Template Account

Task	J-Web Configuration Editor
Navigate to the System Login	1.	In the J-Web interface, select
level in the configuration		Configuration>View and Edit>Edit
hierarchy.		Configuration.
	2.	Next to System, click Configure or Edit.
	3.	Next to Login, click Configure or Edit.
Create a user named admin who	1. Next to User, click Add new entry.
belongs to the superuser login	2.	In the User name box, type admin.
class.
	3.	In the Class box, type superuser.
	4.	Click OK.

CLI Configuration Editor

From the [edit] hierarchy level, enter

edit system login

Set the username and the login class for the user:

set user admin class superuser

20■ Managing User Authentication with a Configuration Editor