topic IOS SSH AAA help!! in Network Access Control

IOS SSH AAA help!!

alex goshtaei — Sun, 10 Mar 2019 23:28:17 GMT

Hi All,

I have this config:

aaa authentication login default local line enable

aaa authorization console

aaa authorization exec default local

aaa authorization network default local

line vty 0 4

password Gr834!

transport preferred ssh

transport input ssh

transport output ssh

then create username "admin" with privilege 15. But I can't login to SSH with this username and password? I've already generated public key on the router.

any idea would be very appreciated.

thanks

Alex

Re: IOS SSH AAA help!!

nomair_83 — Wed, 06 May 2009 08:11:38 GMT

try this:

username cisco password cisco

enable secret cisco

ip domain-name nsp.org

crypto key genrete rsa 1024

ip ssh version 2

line vty 0 4

transport input all

exit

Re: IOS SSH AAA help!!

antonio.ocampo — Thu, 07 May 2009 00:24:16 GMT

crypto key generate rsa 1024

Re: IOS SSH AAA help!!

nomair_83 — Thu, 07 May 2009 06:29:50 GMT

SSH normally works with minimum 1024.

Re: IOS SSH AAA help!!

bretjaquish — Thu, 07 May 2009 16:11:04 GMT

Here is a complete ssh config that doesn't need a hostname or domain name:

crypto key gen rsa gen label SSH_Keys mod 1024

ip ssh ver 2

ip ssh authentication-retries 3

ip ssh time-out 90

ip ssh source-interface loopback0

username test secret p@ssw0rd

enable secret s3cr3tPassw0rd!

aaa new-model

aaa authentication login default local

aaa authentication enable default enable

line vty 0 4

transport input ssh

I would recommend AGAINST creating level 15 usernames.