Juniper Networks J-Series - Manual (Page 36)

To configure TACACS+ authentication:
1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI
configuration editor.
2. Perform the configuration tasks described in Table 12 on page 14.
3. If you are finished configuring the network, commit the configuration.
To completely set up TACACS+ authentication, you must create user template
accounts and specify a system authentication order.
4. Go on to one of the following procedures:
■ To specify a system authentication order, see “Configuring Authentication
Order” on page 15.
■ To configure a remote user template account, see “Creating a Remote
Template Account” on page 19.
■ To configure local user template accounts, see “Creating a Local Template
Account” on page 20.
Table 12: Setting Up TACACS+ Authentication
CLI Configuration Editor J-Web Configuration Editor Task
From the [edit] hierarchy level, enter
edit system
1. In the J-Web interface, select
Configuration>View and Edit>Edit
Configuration.
2. Next to System, click Configure or
Edit.
Navigate to the System level in the
configuration hierarchy.
Set the IP address of the TACACS+
server:
set tacplus-server address
172.16.98.24
1. In the Tacplus server box, click Add
new entry.
2. In the Address box, type the IP
address of the TACACS+ server:
172.16.98.24
Add a new TACACS+ server
Set the shared secret of the TACACS+
server:
set tacplus-server 172.16.98.24 secret
Tacacssecret1
In the Secret box, type the shared secret of
the TACACS+ server:
Tacacssecret1
Specify the shared secret (password) of
the TACACS+ server. The secret is
stored as an encrypted value in the
configuration database.
Set the router's loopback address as
the source address:
set tacplus-server 172.16.98.24
source-address 10.0.0.1
In the Source address box, type the
loopback address of the router:
10.0.0.1
Specify the source address to be
included in the TACACS+ server
requests by the router. In most cases,
you can use the loopback address of the
router.
14 ■ Managing User Authentication with a Configuration Editor
J-series™ Services Router Administration Guide