Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Configuring Junos OS User Accounts

1. Add a new user, using the user’s assigned account login name.
   [edit groups global]user@host# edit system login user user username
2. (Optional) Configure a full descriptive name for the account.

   If the full name includes spaces, enclose the entire name in quotation marks.

   [edit groups global system login user user-name]user@host# set full-name complete-name

   For example:

   user@host# show groups

   global {system {login {user admin {full-name "general administrator";}}}}
3. (Optional) Set the user identifier (UID) for the account.

   As with UNIX systems, the UID enforces user permissions and file access. If you do not set the UID, Junos OS assigns one for you. The format of the UID is a number in the range of 100 to 64000.

   [edit groups global system login user user-name]user@host# set uid uid-value

   For example:

   user@host# show groups

   global {system {login {user admin {uid 9999;}}}}
4. Assign the user to a login class.

   You can define your own login classes or assign one of the predefined Junos OS login classes.

   The predefined login classes are as follows:

   • super-user—all permissions
   • operator—clear, network, reset, trace, and view permissions
   • read-only— view permissions
   • unauthorized—no permissions
   [edit groups global system login user user-name]user@host# set class class-name

   For example:

   user@host# show groups

   global {system {login {user admin {class super-user;}}}}
5. Use one of the following methods to configure the user password.
   • To enter a clear-text password that the system encrypts for you, use the following command to set the user password:
     [edit groups global system login user user-name]user@host# set authentication plain-text-password passwordNew Password: type password hereRetype new password: retype password here

     As you enter the password in plain text, Junos OS encrypts it immediately. You do not have to configure Junos OS to encrypt the password as in some other systems. Plain-text passwords are therefore hidden and marked as ## SECRET-DATA in the configuration.

   • To enter a password that is already encrypted, use the following command to set the user password:

     Caution: Do not use the encrypted-password option unless the password is already encrypted, and you are entering the encrypted version of the password. If you accidentally configure the encrypted-password option with a plain-text password or with blank quotation marks (" "), you will not be able to log in to the device as this user.

     [edit groups global system login user user-name]user@host# set authentication encrypted-password "password"New Password: type password hereRetype new password: retype password here
   • To load previously generated public keys from a named file at a specified URL location, use the following command to set the user password:
     [edit groups global system login user user-name]user@host# set authentication load-key-file URL filename
   • To enter an ssh public string, use the following command to set the user password:
     [edit groups global system login user user-name]user@host# set authentication (ssh-dsa | ssh-ecdsa | ssh-rsa) authorized-key
6. At the top level of the configuration, apply the configuration group.

   If you use a configuration group, you must apply it for it to take effect.

   [edit]user@host# set apply-groups global
7. Commit the configuration.
   user@host# commit
8. To verify the configuration, log out and log back in as the new user.