SRX

 View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  algorithm used for storing password on srx

    Posted 03-08-2020 23:29

    Hi Experts,

     

    we have a securiy audit on our SRX w/c is running on 15.1X49-D120.3. by default what is the hash algorthim used for user password stored on srx? and is there a show command to know it?



  • 2.  RE: algorithm used for storing password on srx
    Best Answer

    Posted 03-09-2020 00:52

    Hi,

     

    In junos 15.1 the default algorithm is SHA256 as noted in KB31903:

    https://kb.juniper.net/InfoCenter/index?page=content&id=KB31903

     

    Older hashes (eg. MD5) can be used on newer Junos releases - but is of course not recommended 🙂

     

    In later releases (haven't found precisely which one it's introduced), the default is SHA512.

     

    SHA256 hashes starts with $5$, SHA512  hashes starts with $6$.



  • 3.  RE: algorithm used for storing password on srx

     
    Posted 03-09-2020 06:29

    Juniper mentions two different JUNOS releases in which SHA-512 became the default, either 17.1:

    https://www.juniper.net/documentation/en_US/junos/topics/concept/authentication-plain-text-password-requirements.html

     

    or 17.2:

    https://kb.juniper.net/InfoCenter/index?page=content&id=KB31903