cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3117
Views
0
Helpful
17
Replies

ACS 5.4 and Juniper J-Web

Simon Young
Level 1
Level 1

Hi

I have set up an ACS 5.4 box and have some test devices connected to it.

Cisco and Juniper, both working fine using TACACS

I can connect to both using SSH or Telnet but my problem is the J-Web Juniper GUI

I can access the J-web no problem with the root account.

I can not seem to get it to work, no matter what I try. Here is my shell from the ACS box

Untitled.jpg

And the following Juniper configuration.  I have tried binding the local-user-name attribute to both the remote and remoteadmin with no luck. Anyone have any ideas how I can resolve this??? Or if its even possible?

version 9.6R1.13;

system {

    host-name Juniper-Firewall;

    authentication-order [ tacplus password ];

    root-authentication {

        encrypted-password "$1$1tRuy9o2$LwSPxNwe4XGNMOMIMo1pd1"; ## SECRET-DATA

    }

    tacplus-server {

        10.251.200.25 {

            secret "$9$zaUL6/AtuOIRS5QF/CuEhws2"; ## SECRET-DATA

            timeout 10;

            single-connection;

        }

    }

    accounting {

        events [ login change-log interactive-commands ];

        destination {

            tacplus;

        }

    }

    login {

        user admin {

            uid 2001;

            class super-user;

            authentication {

                encrypted-password "$1$MNUZBLFW$X2sJL/UTgRYcgBNV4RLe.0"; ## SECRET-DATA

            }

        }

        user remote {

            full-name "Remote User";

            uid 2025;

            class operator;

        }

        user remoteadmin {

            full-name "Remote Admin";

            uid 2026;

            class super-user;

        }

    }

    services {

        ssh;

        telnet;

        web-management {

            https {

                system-generated-certificate;

                interface fe-0/0/0.0;

17 Replies 17

Jatin Katyal
Cisco Employee
Cisco Employee

I was working on a almost similar issues today and he confirmed that he is able to access J-WEB with the tacacs credentials.You may check his config here: https://supportforums.cisco.com/message/3953224#3953224

Going through your config it seems you have not defined/created classes like he did:

for example:

login {

    class RO-CLASS {

        permissions [ view view-configuration ];

    }

    class RW-CLASS {

        permissions all;

    }

    user JUNOS-RO {

        uid 2000;

Jatin Katyal
- Do rate helpful posts -

~Jatin

A Junos upgrade and everything works

Jatin thanks very much for your help with this issue

Awesome I think while helping you on this I've seen almost all Juniper configuration guides so now I am little familiar with Junos as well.

Jatin Katyal
- Do rate helpful posts -

~Jatin