AAA problem in accessing switch through console

shoaib sheikh — Mon, 11 Mar 2019 05:59:23 GMT

Hello All,

I have configured aaa commands as below:

tacacs-server host xxxxxx
tacacs-server directed-request
tacacs-server key xxxxxx

aaa new-model

aaa new-model
aaa authentication login default local
aaa authentication login techop group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
aaa session-id common

line vty 0 15
login authentication techop

Tacacs is working fine for ssh but when I am trying to console to switch
I am able to login in exec mode but when switch asking for enable password
the switch is not taking any password ( be it Tacacs or local credentials).
Also I am able to login to exec mode through console by local credentials
and not by credentials of Tacacs server.

Temp>en
password:
% Error in authentication.

Hey,Please share :debug aaa

edwardcollins7 — Thu, 20 Aug 2015 16:00:08 GMT

Hey,

Please share :

debug aaa authentication

debug aaa authorizarion

debug tacacs+

Regards

Hi Edward,Thanks for taking

shoaib sheikh — Wed, 26 Aug 2015 05:00:21 GMT

Hi Edward,

Thanks for taking interest in my query. I have myself found a working solution for this. I have removed command aaa authentication enable default group tacacs+ enable and I was able to enter privilege mode from local enable password.

topic AAA problem in accessing switch through console in Network Access Control

AAA problem in accessing switch through console

Hey,Please share :debug aaa

Hi Edward,Thanks for taking