topic Can't SSH into switch with new username in Switching

Can't SSH into switch with new username

frankjmurray3 — Tue, 10 Oct 2023 23:50:20 GMT

I've got a C9300 IOS-XE ver 17.6.4. I can SSH into it no problem with my original 'admin' username. But I've created another username with privilege 15 and I cannot login with it- failed authentication.

I know I'm missing something simple but I can't find it.

Config snippet:

aaa new-model
!
aaa authentication login default local

username userx privilege 15 secret X.X.X

ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2

line vty 0 4
privilege level 15
logging synchronous
transport input ssh
line vty 5 15
privilege level 15
logging synchronous
transport input ssh
line vty 16 31
transport input ssh

Thanks for any help.

FJM

Re: Can't SSH into switch with new username

M02@rt37 — Wed, 11 Oct 2023 04:46:31 GMT

Hello @frankjmurray3,

Please under configure terminal:

aaa authorization exec local

And add under vty lines:

login authentication default

Re: Can't SSH into switch with new username

MHM Cisco World — Wed, 11 Oct 2023 06:12:49 GMT

Hmm' interesting.

Can you access using different PC

Re: Can't SSH into switch with new username

frankjmurray3 — Wed, 11 Oct 2023 19:47:16 GMT

I figured it out- fat-fingered the password in the config. Must have done it twice, because I tried re-entering it once.

Thanks for replying.