Discussion

Solution
Use the following command to change the encryption used for plain-text passwords
to DES:
[edit]
aviva@router1# set system login password format des
For MD5 encryption, use the following command:
[edit]
aviva@router1# set system login password format md5
Discussion
All passwords that you enter in a JUNOS configuration are encrypted. For plain-text
passwords, you can use one of three types of encryption: SHA1 (the default and the
strongest), MD5, or DES. The encryption type that you configure is used for all plaintext
passwords. You cannot specify different encryption types for different users.
See Also
Recipe 2.5
2.8 Creating a Login Account for Remote
Authentication
Problem
You want to use a RADIUS or TACACS+ database to authenticate users instead of
setting up individual login accounts for them on the router.
Solution
Create a login account that has the username remote:
[edit system]
aviva@router1# set login user remote class operator
aviva@router1# set login user remote full-name "remote account"
aviva@router1# set login user remote uid 9999
Then set the authentication order so that the remote authentication server is checked
before the router’s configuration file. The following command uses a RADIUS server:
[edit system]
aviva@router1# set authentication-order [ radius password ]
Use the following command for TACACS+:
[edit system]
aviva@router1# set authentication-order [ tacacs password ]
86 | Chapter 2: Basic Router Security and Access Control
This is the Title of the Book, eMatter Edition
Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.