aaa authentication failed in console mode

Labin08 — Mon, 11 Mar 2019 08:52:04 GMT

Hello all,

I authenticate my switches over an ISE acting as radius server.

When I connect with ssh, everything works well. My radius server return priv15 and I am logged directly in privilege 15.

But the weird thing when I try to connect through the console cable, I get authenticate, the radius server return me the priv15 but the switch ask me to put the "enable" command. When I issue this command, I get rejected because the radius server is not able to find the object "$enab15$" that sounds logical.

So do you have any idea why I can't log with the console cable directly in privilege 15 ?

You can find below my configuration:

aaa new-model
aaa group server radius RADIUS-SERVERS
aaa authentication login default group RADIUS-SERVERS local
aaa authentication enable default group RADIUS-SERVERS enable
aaa authentication dot1x default group RADIUS-SERVERS
aaa authorization exec default group RADIUS-SERVERS if-authenticated
aaa authorization network default group RADIUS-SERVERS if-authenticated
aaa accounting send stop-record authentication failure
aaa accounting update newinfo periodic 55
aaa accounting exec default start-stop group RADIUS-SERVERS
aaa accounting connection default start-stop group RADIUS-SERVERS
aaa accounting system default start-stop group RADIUS-SERVERS
no aaa accounting system guarantee-first
aaa session-id common
!
line con 0
 logging synchronous
 escape-character 3
 stopbits 1
line vty 0 4
 logging synchronous
 transport input ssh
 escape-character 3
line vty 5 15
 logging synchronous
 transport input ssh
 escape-character 3
!

Have a nice day,

Alex

Re: aaa authentication failed in console mode

fbabashahi — Thu, 15 Nov 2018 12:46:48 GMT

Hi Alex.
I think you need this command "aaa authorization console" and "authorization exec" in line console

Re: aaa authentication failed in console mode

Labin08 — Thu, 15 Nov 2018 15:03:49 GMT

It works, many thanks.

Alex

Re: aaa authentication failed in console mode

fbabashahi — Thu, 15 Nov 2018 18:31:25 GMT

your welcome

Good Luck

topic Re: aaa authentication failed in console mode in Network Access Control

aaa authentication failed in console mode

Re: aaa authentication failed in console mode

Re: aaa authentication failed in console mode

Re: aaa authentication failed in console mode