Juniper J-Series Administration Manual page 41

Creating a Remote Template Account
You can create a remote template that is applied to users authenticated by RADIUS
or TACACS+ that do not belong to a local template account.
By default, the JUNOS software uses the
The procedure provided in this section creates a sample user named
belongs to the
To create a remote template account:
1.
2.
3.
4.
Table 16: Creating a Remote Template Account
Task
Navigate to the System Login
level in the configuration
hierarchy.
Create a user named
remote
belongs to the login class.
operator
The authenticated user does not exist locally on the Services Router.
The authenticated user's record in the RADIUS or TACACS+ server specifies
local user, or the specified local user does not exist locally on the router.
operator login class.
Navigate to the top of the configuration hierarchy in either the J-Web or CLI
configuration editor.
Perform the configuration tasks described in Table 16 on page 19.
If you are finished configuring the network, commit the configuration.
To completely set up RADIUS or TACACS+ authentication, you must configure
at least one RADIUS or TACACS+ server and specify a system authentication
order.
Go on to one of the following procedures:
To configure a RADIUS server, see "Setting Up RADIUS
Authentication" on page 12.
To configure a TACACS+ server, see "Setting Up TACACS+
Authentication" on page 13.
To specify a system authentication order, see "Configuring Authentication
Order" on page 15.
J-Web Configuration Editor
1. In the J-Web interface, select
Configuration>View and Edit>Edit
Configuration.
2. Next to System, click Configure or Edit.
3. Next to Login, click Configure or Edit.
who 1. Next to User, click Add new entry.
2. In the User name box, type
3. In the Class box, type
4. Click OK.
Chapter 1: Managing User Authentication and Access
template account when
remote
.
remote
.
operator
Managing User Authentication with a Configuration Editor
that
remote
CLI Configuration Editor
From the hierarchy level,
[edit]
enter
edit system login
Set the username and the login
class for the user:
set user remote class operator
19