Managing Users (J-Web Procedure) - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Configuring MS-CHAPv2 to Provide Password-Change Support (CLI Procedure)
Related
Documentation

Managing Users (J-Web Procedure)

Copyright © 2010, Juniper Networks, Inc.
Junos OS for EX Series switches enables you to configure the Microsoft Corporation
implementation of the Challenge Handshake Authentication Protocol version 2
(MS-CHAPv2) on the switch to provide password-change support. Configuring
MS-CHAPv2 on the switch provides users accessing a switch the option of changing the
password when the password expires, is reset, or is configured to be changed at next
login.
See RFC 2433 at , Microsoft PPP CHAP Extensions, for information about MS-CHAP.
Before you configure MS-CHAPv2 to provide password-change support, ensure that you
have:
Configured RADIUS server authentication. Configure users on the authentication server
and set the first-tried option in the authentication order to radius. See "Example:
Connecting a RADIUS Server for 802.1X to an EX Series Switch" on page 2765.
To configure MS-CHAPv2, specify the following:
[edit system radius-options]
user@switch# set password-protocol mschap-v2
You must have the required access permission on the switch in order to change your
password.
Managing Users (J-Web Procedure) on page 491
For more about configuring user access, see the Junos OS Access Privilege Configuration
Guide.
You can use the Users Configuration page for user information to add new users to an
EX Series switch. For each account, you define a login name and password for the user
and specify a login class for access privileges.
To configure users:
Select >
1. Configure System Properties
The User Management page displays details of users, the authentication order, the
RADIUS servers and TACACS servers present.
Click Edit.
2.
Click any of the following options on the
3.
Add—Select this option to add a user. Enter details as described in Table 99 on
page 492.
Edit—Select this option to edit an existing user's details. Enter details as described
in Table 99 on page 492.
Chapter 24: User and Access Management Configuration
> .
User Management
tab:
Users
491