Need Help? We are right here!
Two Factor Authentication (2FA) or Multifactor Authentication is the process of the authentication in which you have to provide two factors to gain the access. First Factor is the one that you know username and password and Second factor is what you might have as unique like a phone (For OTP) or Fingerprint. This additional layer prevents the unauthorized person from accessing the resources even if they know your username and password. miniOrange provides 15+ authentication methods and solutions for various use cases. TACACS+ provides better authentication, authorization and accounting, which allows for more flexible administrative control. In this guide, we will learn how to configure TACACS+ on Juniper routers and switches.
miniOrange provides user authentication from various external directories such as miniOrange Directory, Microsoft AD, Azure Active Directory/LDAP, AWS Cognito and many more.
Can't find your Directory? Contact us on firstname.lastname@example.org
miniOrange offers free help through a consultation call with our System Engineers to Install or Setup Two-Factor Authentication for Juniper Routers and Switches solution in your environment with 30-day trial.
For this, you need to just send us an email at email@example.com to book a slot and we'll help you setting it up in no time.
|Client Name:||Any name for your reference.|
|Client IP:||IP address of network device which will send TACACS authentication request.|
|Shared Secret:||Security key.
For Eg. "sharedsecret"
(Keep this with you, you will need to configure same on TACACS client).
|Group Name:||Group for which the policy will apply.|
|Policy Name:||Any Identifier that specifies policy name.|
|Login Method||Login Method for the users associated with this policy.|
|Enable 2-Factor Authentication||Enables Second Factor during Login for users associated with this policy.|
|Enable Adaptive Authentication||Enables Adaptive Authentication for Login of users associated with this policy.|
Only For On-Premise Version
Open Firewall Ports.
set system tacplus-server <server-ip> port 49
set system tacplus-server <server-ip> < server >
set system tacplus-server <server-ip> source-address <switch-ip>
set system accounting destination tacplus server <server-ip> port 49
set system accounting destination tacplus server <server-ip> < server >
set system accounting destination tacplus server <server-ip> source-address <switch-ip>
set system login user remote class operator
(The Active Directory Group Provisioning (Sync) setup is done. Now, whenever a user is created or modified in LDAP server and if the Assign Users to groups is enabled, then user group attribute from the LDAP server will be automatically synced and the user group will be assigned or changed accordingly in miniOrange.)
Note: You can follow this guide, if you want to customize and enroll MFA for end users.
Our Other Identity & Access Management Products