05-30-2013 05:42 AM - edited 03-10-2019 08:29 PM
Hi
I have set up an ACS 5.4 box and have some test devices connected to it.
Cisco and Juniper, both working fine using TACACS
I can connect to both using SSH or Telnet but my problem is the J-Web Juniper GUI
I can access the J-web no problem with the root account.
I can not seem to get it to work, no matter what I try. Here is my shell from the ACS box
And the following Juniper configuration. I have tried binding the local-user-name attribute to both the remote and remoteadmin with no luck. Anyone have any ideas how I can resolve this??? Or if its even possible?
version 9.6R1.13;
system {
host-name Juniper-Firewall;
authentication-order [ tacplus password ];
root-authentication {
encrypted-password "$1$1tRuy9o2$LwSPxNwe4XGNMOMIMo1pd1"; ## SECRET-DATA
}
tacplus-server {
10.251.200.25 {
secret "$9$zaUL6/AtuOIRS5QF/CuEhws2"; ## SECRET-DATA
timeout 10;
single-connection;
}
}
accounting {
events [ login change-log interactive-commands ];
destination {
tacplus;
}
}
login {
user admin {
uid 2001;
class super-user;
authentication {
encrypted-password "$1$MNUZBLFW$X2sJL/UTgRYcgBNV4RLe.0"; ## SECRET-DATA
}
}
user remote {
full-name "Remote User";
uid 2025;
class operator;
}
user remoteadmin {
full-name "Remote Admin";
uid 2026;
class super-user;
}
}
services {
ssh;
telnet;
web-management {
https {
system-generated-certificate;
interface fe-0/0/0.0;
Solved! Go to Solution.
05-31-2013 05:11 PM
I was working on a almost similar issues today and he confirmed that he is able to access J-WEB with the tacacs credentials.You may check his config here: https://supportforums.cisco.com/message/3953224#3953224
Going through your config it seems you have not defined/created classes like he did:
for example:
login {
class RO-CLASS {
permissions [ view view-configuration ];
}
class RW-CLASS {
permissions all;
}
user JUNOS-RO {
uid 2000;
Jatin Katyal
- Do rate helpful posts -
06-03-2013 05:23 AM
A Junos upgrade and everything works
Jatin thanks very much for your help with this issue
06-03-2013 05:45 AM
Awesome I think while helping you on this I've seen almost all Juniper configuration guides so now I am little familiar with Junos as well.
Jatin Katyal
- Do rate helpful posts -
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide