Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

firewall-authentication (Security)

date_range 27-Feb-24

Syntax

content_copy zoom_out_map
firewall-authentication {
    mtls-profile profile-name;
    mtls-profile-fallback-password;
    traceoptions (Security Firewall Authentication) {
        flag (all | authentication | proxy) {
        }
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit security]

Description

Defines the type of firewall authentication available for a logical system. Also specifies the data plane firewall authentication tracing options.

Options

  • mtls-profile—Enable passwordless user authentication based on client/server certificate validation using a public/private key.

  • mtls-profile-fallback-password—Enable user authentication with mTLS and fallback to standard login when it fails.

  • flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.

    • all—Enable all tracing operations.

    • authentication—Trace data-plane firewall authentication events.

    • proxy—Trace data-plane firewall authentication proxy events.

  • detail—Display moderate amount of data.

  • extensive—Display extensive amount of data.

  • terse—Display minimum amount of data.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 8.5.

footer-navigation