Juniper J-Series Administration Manual page 39

Table 14: Defining Login Classes (continued)
Task
Create a login class named
operator-and-boot with the
ability to reboot the router.
Give the operator-and-boot
login class operator
privileges.
Creating User Accounts
User accounts provide one way for users to access the Services Router. (Users can
access the router without accounts if you configured RADIUS or TACACS+ servers,
as described in "Setting Up RADIUS Authentication" on page 12 and "Setting Up
TACACS+ Authentication" on page 13.)
The procedure provided in this section creates a sample user named
the following characteristics:
J-Web Configuration Editor
1. Next to Class, click Add new entry.
2. Type the name of the login class:
operator-and-boot
3. In the Allow commands box, type the
reboot command enclosed in quotation marks:
"request system reboot"
4. Click OK.
1. Next to Permissions, click Add new entry.
2. In the Value list, select clear.
3. Click OK.
4. Next to Permissions, click Add new entry.
5. In the Value list, select network.
6. Click OK.
7. Next to Permissions, click Add new entry.
8. In the Value list, select reset.
9. Click OK.
10. Next to Permissions, click Add new entry.
11. In the Value list, select trace.
12. Click OK.
13. Next to Permissions, click Add new entry.
14. In the Value list, select view.
15. Click OK.
The user belongs to the
cmartin
The user cmartin uses an encrypted password,
Chapter 1: Managing User Authentication and Access
CLI Configuration Editor
Set the name of the login class and
the ability to use the
reboot
set class operator-and-boot
allow-commands "request system
request system
reboot"
Set the permission bits for the
operator-and-boot
set class operator-and-boot
permissions [clear network reset
trace view]
login class.
superuser
$1$14c5.$sBopasdFFdssdfFFdsdfs0
Managing User Authentication with a Configuration Editor
request system
command:
login class:
with
cmartin
.
17