Case Study: User and Access Configuration

This case study shows a simple basic configuration of a Juniper Networks router. This configuration explains how to configure a user, enable some system services like Telnet, FTP, and SSH, and enable the fxp0 management interface for IP connectivity. This basic configuration is implemented in configuration mode.

The first statement creates a user named lab . When creating the user, the authentication plain-text will prompt you to enter and verify a password for the user. The second set of three statements are individual statements that are used to enable Telnet, FTP, and SSH. The default behavior for the router is with these services disabled. Lastly, we configure the fxp0 management interface to allow IP connectivity to the router.

Note

The sample configuration output assumes that a console will be connected directly to the router or user access via IP to the router will be within the same network segment. If remote access from another network is required, you would need to configure a routing feature of some kind to make that happen. You can refer to Chapter 8 for details on routing configurations.

 [edit]  lab@Chicago# set system login user lab class superuser authentication plain-text-password New password: Retype new password: [edit] lab@Chicago# set system services telnet [edit] lab@Chicago# set system services ftp [edit] lab@Chicago# set system services ssh [edit] lab@Chicago# set interfaces fxp0 unit 0 family inet address 192.168.161.16/24

Sample Basic Configuration for Router Chicago

The following output serves as a good basic starting configuration for the Juniper Networks router:

 lab@Chicago> show configuration  version 5.1R1.4; system {     login {         user lab {             uid 2000;             class superuser;             authentication {                 encrypted-password "$."; # SECRET-DATA             }         }     }     services {         ssh;     } } interfaces {     fxp0 {         speed 100m;         link-mode full-duplex;         unit 0 {             encapsulation 802.3-llc;             family inet {                 address 192.168.161.16/24;             }         }     } }