topic Re: Unable to Save Config after Nexus Password Recovery in Network Access Control

Unable to Save Config after Nexus Password Recovery

shah_vatsal239 — Tue, 12 Apr 2022 22:11:18 GMT

After Password Recover of Nexus 5672UP, I was able to login to Nexus switch via console cable, However I am seeing below error. I am unable to save config or go to terminal mode or do show command. Any idea ?
NEX01# config terminal
Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

NEX01# copy running-config startup-config
Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

Is there any way to completely factory reset and erase nvram ?

Re: Unable to Save Config after Nexus Password Recovery

balaji.bandi — Tue, 12 Apr 2022 22:35:03 GMT

looks like this is TACACS Authorise issue

can you post show version and show run | in tac

Re: Unable to Save Config after Nexus Password Recovery

shah_vatsal239 — Wed, 13 Apr 2022 13:37:45 GMT

I think show run | in tac also shows same output of authorization.

Any command I enter shows same authorization issue. No command works.

show running-config, show inventory or any command doesn't work.

This switch is not connected to anywhere currently. Why would Password Reset won't bypass this authorization ? Is there a way to completely factory reset ? I don't need any config on this switch. I just need to get into this switch to be utilized for project.

Re: Unable to Save Config after Nexus Password Recovery

Arne Bier — Fri, 15 Apr 2022 21:35:33 GMT

You might get the assistance you need by asking this question in the Nexus Community - it's not really a NAC question.

Cisco Community > Technology and Support > Data Center and Cloud > Nexus Dashboard

Re: Unable to Save Config after Nexus Password Recovery

thomas — Fri, 15 Apr 2022 22:03:41 GMT

This switch appears to be configured to use TACACS for command-based authorization of each and every command on the CLI and you do not appear to be authorized to run these commands from the console.

Try logging in via SSH as you normally would and hopefully this will work properly.

Talk to your peers or manager or security team in your organization about your privilege level and whether or not you should be allowed to run these commands.

If you should be able to do this, they may need to change your authorized privilege level or add commands to your privilege level so you may run them.

Re: Unable to Save Config after Nexus Password Recovery

shah_vatsal239 — Mon, 18 Apr 2022 13:17:38 GMT

As per Cisco TAC, due to this issue we cannot recover password, which defeats the purpose of password recovery.

The only option is to factory reset by below procedure.

https://community.cisco.com/t5/data-center-and-cloud-videos/how-to-restore-a-cisco-nexus-switch-from-loader-prompt/bc-p/3101971