Juniper User Authentication Configuration

Juniper User Authentication Configuration

Following are the command line configuration for Juniper User authentication on SRX boxes:


To configure the device for pass-through firewall authentication

1. set access profile FWAUTH client yogesh firewall-user password abc@123
2. set access firewall-authentication pass-through default-profile FWAUTH
3. set security policies from-zone Internal to-zone External policy NewPol match source-address HQ-LOCAL  destination-address any application http  
4. set security policies from-zone Internal to-zone External policy NewPol  then permit firewall authentication pass-through client-match yogesh

By default access allowed for 10 min in case of idle session to change the settings

            #set access profile FWAUTH session-options client-idle-timeout "TIME IN MIN"

To view the current authentication table

            >show security firewall-authentication users

            >show security firewall-authentication history

To configure the device for Web firewall authentication

1. set access profile WEBAUTH client yogesh firewall-user password abc@123
2. set access firewall-authentication web-authentication default-profile WEBAUTH
3. set system services web-management http interface fe-0/0/5.0
4. set interfaces fe-0/0/5.0 family inet set address 192.168.1.250/24 web-authentication http
5. set security policies from-zone Internal to-zone External policy NewPol match source-address HQ-LOCAL  destination-address any application http 

set security policies from-zone Internal to-zone External policy NewPol  then permit firewall authentication web-authentication client-match yogesh

To configure the Client group

1. set access profile WEBAUTH client C-NAME client-group G-NAME firewall-user password abc@123