topic Re: Authentication without Password in Network Access Control

Authentication without Password

ppande — Sun, 10 Mar 2019 14:13:58 GMT

we would like to configure a cisco nas AS 5300 for authentication without the need for any password. The authetication is required on username basis only. Is there any way to do this.

Please advise.

Re: Authentication without Password

liviu.gheorghe — Tue, 01 Apr 2003 09:44:38 GMT

You can configure local users without any password with the IOS command "username".

Then you have to configure local authentication on the physical lines your users are using. This is done with the command "login local" in line config mode (line vty 0 4 or line 1 240, for example).

If you are using aaa new-model, then you have to configure: "aaa authentication login default local".

Re: Authentication without Password

r.vanwolferen — Thu, 03 Apr 2003 13:51:31 GMT

If you are using ACS for the authentication than a user must have a password. Creating a user without a password is not allowed in ACS. So authentication to the ACS is then not possible.

You can only authenticate on the router, wich means that the usernames are inside the configuration.

For security reasons and logging create the user with a password the same as the username. The ACS can log the connection and no users are inside the router.

Re: Authentication without Password

ppande — Fri, 04 Apr 2003 12:42:53 GMT

Thanks for the reply. Actually we are using AS5300 for dial in users with Radius for authentication. We have the following configuration on our As5300

aaa new-model

aaa authentication login default radius

aaa authentication login no_radius line

aaa authentication ppp default if-needed radius

we are using certain attributes of radius for authetication , however we have found that cisco as 5300 requires some password (any character ) for authetication. on a Commworks NAS TCH 1000 we are able to get login without any password.

any input will be greatly appreciated.