EdgeRouter - User Accounts


Overview


Readers will learn how to add users and delete the default user account on EdgeOS, as well as how to set up authentication by a RADIUS server.

NOTES & REQUIREMENTS:
Applicable to the latest EdgeOS firmware on all EdgeRouter models. Please see the Related Articles below for more information. Device used in this article:

Table of Contents


  1. Adding and Removing Users
  2. How to Configure RADIUS Authentication
  3. Related Articles

How to Add and Remove Users


Back to Top

GUI: Access the Graphical User Interface (GUI).

1. Log in to the GUI using the default user account.

Username: ubnt
Password: ubnt

2. Navigate to the Users tab and add a new user.

Users > Add User +

Username: <user>
Full Name: First and last name (optional)
Password: <secret>
Confirm: <secret>
Role: Admin

3. Log out of the GUI. 

4. Log in again using the newly created credentials.

5. Delete the default user account.

Users > ubnt > Actions > Delete

 

The CLI equivalent of this configuration is shown below.

CLI: Access the command line interface (CLI). You can do this using the CLI button in the GUI or by using a program such as PuTTY.

1. Log in to the CLI using the default user account.

Username: ubnt
Password: ubnt

2. Enter configuration mode.

configure

3. Add a new user and set the privilege level.

set system login user <user> authentication plaintext-password <secret>
set system login user <user> level admin
NOTE: It is also possible to configure public-key authentication using the CLI. 

4. Commit the changes and save the configuration.

commit ; save

5. Log out of the CLI.

exit

6. Log in again using the newly created credentials.

7. Delete the default user account.

delete system login user ubnt

8. Commit the changes and save the configuration.

commit ; save

How to Configure RADIUS Authentication


Back to Top

EdgeOS supports login authentication using an external RADIUS server. To configure a RADIUS login, use the following commands:

configure
set system login radius-server <ip address> secret <radius key>
commit
save
exit 
NOTE: A local user account must also exist on the system even when RADIUS authentication is used.

Related Articles


Back to Top

Intro to Networking - How to Establish a Connection Using SSH