We are unable to access the switch on console using root user & password, However we can login to shell mode using the same. This article explain how to configure Root authentication on console with TACACS+ or RADIUS is configured on the device.

This issue might been seen if the following conditions are meet:

• RADIUS or TACACS+ is configured & authenticating remote users
• Authentication order is only TACPLUS or RADIUS or Both.

If password (local password authentication) is not included at the end of the authentication order & the remote authentication server reject the authentication request, then the device won't attempt to authenticate using local password.

set system authentication-order [tacplus password]
 

Thus, the device must include password as a final authentication-order option for the device to attempt local password authentication in the event that the remote authentication server reject the request.

2023/07/19: First draft

https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/junos-os-authentication-order.html