Configuring Authentication Order - Juniper J2300 User Manual

Configuring Authentication Order

The procedure provided in this section configures the Services Router to
attempt user authentication with the local password first, then with the
RADIUS server, and finally with the TACACS+ server.
To configure authentication order:
1.
2.
3.
4.
Table 58: Configuring Authentication Order
Task
Navigate to the System level in the
configuration hierarchy.
Add RADIUS authentication to the
authentication order.
Add TACACS+ authentication to the
authentication order.
Navigate to the top of the configuration hierarchy in either the J-Web or CLI
configuration editor.
Perform the configuration tasks described in Table 58.
If you are finished configuring the network, commit the configuration.
To completely set up RADIUS or TACACS+ authentication, you must configure
at least one RADIUS or TACACS+ server and create user template accounts.
Go on to one of the following procedures:
To configure a RADIUS server, see "Setting Up RADIUS Authentication"
on page 182.
To configure a TACACS+ server, see "Setting Up TACACS+ Authentication"
on page 183.
To configure a remote user template account, see "Creating a Remote
Template Account" on page 189.
To configure local user template accounts, see "Creating a Local Template
Account" on page 190.
J-Web Configuration Editor
In the configuration editor hierarchy,
select System.
1.
In the Authentication order box,
click Add new entry.
2. In the drop-down list, select radius.
3. Click OK.
1. In the Authentication Order box,
click Add new entry.
2. In the drop-down list, select
tacplus.
3. Click OK.
Managing Users and Files with a Configuration Editor
Managing Users and Operations
CLI Configuration Editor
From the top of the configuration
hierarchy enter
edit system
Insert the radius statement in the
authentication order:
insert system authentication-order
radius after password
Insert the tacplus statement in the
authentication order:
insert system authentication-order
tacplus after radius
185