topic Re: can't login to ISE 2.6 via ssh in Network Access Control

can't login to ISE 2.6 via ssh

as00001111 — Fri, 26 Jun 2020 10:14:21 GMT

Hi,

I deployed virtual ISE 2.6 and did the initial setup.

During setup I had to define a password.

After the setup, I logged into webinterface. Manual says that I will be asked to change the password, but I wasn't.

So I went to Administration -> Admin Access -> Administrators -> Admin Users and changed the password.

Now I can login to the webinterface with the new password.

But I cannot login via ssh. Neither with new password, nor with password set during initial setup.

Can you help me?

Re: can't login to ISE 2.6 via ssh

balaji.bandi — Fri, 26 Jun 2020 10:30:22 GMT

what happends if you loging using VMWARE Console same username and password.

by the way what username you using for SSH ?

if you have access to GUI you can see the events, what events you see ?

Re: can't login to ISE 2.6 via ssh

tsme — Fri, 26 Jun 2020 10:36:01 GMT

Hi,

you have two types of users:

CLI user (you can use to connect via SSH)
GUI user (Admin user to administrate your ISE-deployment)

In the initial setup (Step 2) you were asked to give a username (for CLI user) - if not set default = admin

You have to use that specific user and its PW to connect via SSH.

Re: can't login to ISE 2.6 via ssh

as00001111 — Fri, 26 Jun 2020 11:34:26 GMT

I don't know why but now it worked. My pw consists of 6 characters so it's not really possible to make a typo.

I tried it 10 times.

Can you tell me how change the password of the cli user?

Re: can't login to ISE 2.6 via ssh

as00001111 — Fri, 26 Jun 2020 11:35:38 GMT

I was able to login via vmware console.

After that I tried ssh and that worked, too.

That's strange.

Re: can't login to ISE 2.6 via ssh

balaji.bandi — Fri, 26 Jun 2020 13:38:32 GMT

Other note : change the password policy settings not to lock after default perioid.

Re: can't login to ISE 2.6 via ssh

tsme — Thu, 06 Aug 2020 10:25:01 GMT

hi,

If you can successfully login and just want to change your password, you simply type password and change your password.

ciscoISE01/my_newUser# password 
Enter old password: 
Enter new password: 
Confirm new password: 
ciscoISE01/my_newUser#

If you have a colleague (CLI-user) who forgot its password, you can do overwrite the user credentials in config.

ciscoISE01/my_newUser# sh run | i username
username my_newUser password hash $5$KrbvrSFS$lw4TaTmWM3272mvmboNNc/xO4u0DiJW3opdOjwPUB36 role admin 
username my_colleague password hash $5$mwnjMpxw$rGaUFZkQ0pvkWUoIIU.YOqxZw07l9yVIhF62cdK78wB role admin
ciscoISE01/my_newUser#

ciscoISE01/my_newUser# conf t
ciscoISE01/my_newUser(config)# username my_colleague password plain yourNewPassword1 role admin
ciscoISE01/my_newUser(config)# end

Please rate if this post was helpful

Re: can't login to ISE 2.6 via ssh

as00001111 — Mon, 29 Jun 2020 16:36:31 GMT

Hi,

do I need to do a "wr" after changing the password?

Does ISE act like a switch?

Re: can't login to ISE 2.6 via ssh

balaji.bandi — Mon, 29 Jun 2020 18:10:49 GMT

No, once you change the password using password command it is changed.

make sure you change the password policy as suggested.