authentication (Login)

date_range 09-Jul-19

Syntax

content_copy zoom_out_map
authentication {
(encrypted-password "password" | plain-text-password);
load-key-file URL filename;
no-public-keys;
ssh-dsa "public-key";
ssh-ecdsa "public-key";
ssh-rsa "public-key";
}

Hierarchy Level

[edit system login user username]

Release Information

Statement introduced before Junos OS Release 7.4.

Statement introduced in Junos OS Release 9.0 for EX Series switches.

Option no-public-keys introduced in Junos OS Release 15.1.

Description

Authentication methods that a user can use to log in to the router or switch. You can assign multiple authentication methods to a single user.

Options

encrypted-password "password"—Message Digest 5 (MD5) or other encrypted authentication. Specify the MD5 or other password. You can specify only one encrypted password for each user.

You cannot configure a blank password for encrypted-password using blank quotation marks (" "). You must configure a password whose number of characters range from 1 through 128 characters and enclose the password in quotation marks.

load-key-file URL filename—Load previously-generated RSA (SSH version 2) and DSA (SSH version 2) public keys from a named file at a specified URL location. The file contains one or more SSH keys.

For information on valid filename and URL formats, see Format for Specifying Filenames and URLs in Junos OS CLI Commands.

plain-text-password—When using this option, the command-line interface (CLI) prompts you for the password and then encrypts it.

no-public-keys—Disables public key authentication for the user specified.

ssh-dsa "public-key"—SSH version 2 authentication. Specify the DSA public key. You can specify one or more public keys for each user.

ssh-ecdsa "public-key"—SSH version 2 authentication. Specify the ECDSA public key. You can specify one or more public keys for each user.

ssh-rsa "public-key"—SSH version 2 authentication. Specify the RSA public key. You can specify one or more public keys for each user.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.