Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 595 / 3946

Configuring MS-CHAPv2 to Provide Password-Change Support (CLI Procedure)
Junos OS for EX Series switches enables you to configure the Microsoft Corporation
implementation of the Challenge Handshake Authentication Protocol version 2
(MS-CHAPv2) on the switch to provide password-change support. Configuring
MS-CHAPv2 on the switch provides users accessing a switch the option of changing the
password when the password expires, is reset, or is configured to be changed at next
login.
See RFC 2433 at , Microsoft PPP CHAP Extensions, for information about MS-CHAP.
Before you configure MS-CHAPv2 to provide password-change support, ensure that you
have:
• Configured RADIUS server authentication. Configure users on the authentication server
and set the first-tried option in the authentication order to radius. See “Example:
Connecting a RADIUS Server for 802.1X to an EX Series Switch” on page 2545.
To configure MS-CHAPv2, specify the following:
[edit system radius-options]
user@switch# set password-protocol mschap-v2
You must have the required access permission on the switch in order to change your
password.
Related
Documentation
•
Managing Users (J-Web Procedure) on page 501
•
For more about configuring user access, see the Junos OS Access Privilege Configuration
Guide at http://www.juniper.net/techpubs/software/junos/index.html .
499 Copyright © 2010, Juniper Networks, Inc.
Chapter 29: User Access Management Configuration