Have you created the local user account named "remote" in the router?
By default Junos uses "remote" to authenticate against TACACS+ if the
authenticated user record is not available locally on the router.
/ihsan
----- Original Message -----
From: Kristian Larsson <[EMAIL PROTECTED]>
Date: Saturday, March 31, 2007 1:11 am
Subject: [j-nsp] Juniper TACACS configuration
> Hey!
>
> I'm having a small configuration problem with a
> Juniper router, I've tried setting up TACACS with
> the following configuration options:
>
> system {
> authentication-order tacplus;
> tacplus-server {
> 1.3.3.7 {
> secret
> "$9$R)GAMrAMDSFMK#MKMASKDMCASDMC"; ## SECRET-
DATA
> source-address 10.0.0.1;
> }
> }
> }
>
> When trying to login I get:
> [EMAIL PROTECTED] ~ $ ssh [EMAIL PROTECTED]
>
>
>
> [EMAIL PROTECTED]'s password:
>
>
> Password
>
> Login incorrect
>
>
> login: kll
>
>
> Password:
>
>
>
>
>
> If the user is also configured as a local user it works but
> not if he's just configured on the TACACS server.
> The TACACS, (tac_plus version F4.0.4.8) works just fine with
> a bunch of Cisco machines. What have I done wrong ?
>
> Cheers,
> Kristian.
>
> --
> Kristian Larsson KLL-RIPE
> Network Engineer SpriteLink [AS39525]
> +46 704 910401 [EMAIL PROTECTED]
> _______________________________________________
> juniper-nsp mailing list [email protected]
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
