topic Re: 9800 SSH issue in Wireless

9800 SSH issue

id404 — Mon, 10 Jan 2022 13:29:08 GMT

The local user level is 15, but after ssh login I still need to enter the enable password, is there any way to ssh login without entering the enable password?

username tempuser privilege 15 password 7 XXXXXXXXXXXX

line vty 0 4
privilege level 15
length 0
transport input ssh
line vty 5 15
privilege level 15
transport input ssh

Re: 9800 SSH issue

Sandeep Choudhary — Mon, 10 Jan 2022 10:53:54 GMT

Hi,

I am having this setting and its not asking enable password while login using ssh.

line vty 0 4
length 0
transport input ssh
transport output ssh
line vty 5 15
transport input ssh
transport output ssh

Regards

Dont forget to rate helpful posts

Re: 9800 SSH issue

JPavonM — Mon, 10 Jan 2022 12:38:28 GMT

Have you tried adding this?

aaa new-model
aaa authentication login default local
aaa authorization exec default local

HTH
-Jesus
*** Please rate helpful responses ***

Re: 9800 SSH issue

id404 — Mon, 10 Jan 2022 13:32:57 GMT

Referring to the gif I just uploaded, I need to enter the enable password on my device

Re: 9800 SSH issue

id404 — Mon, 10 Jan 2022 13:35:22 GMT

Have tried, but nothing works

Re: 9800 SSH issue

Rich R — Mon, 10 Jan 2022 16:26:22 GMT

You did not show your aaa config - did you do what @JPavonM suggested?

No need to set priv on the VTY, that comes from aaa and user config.

Re: 9800 SSH issue

Arshad Safrulla — Mon, 10 Jan 2022 18:15:16 GMT

If you are not using any TACACS or Radius servers for admin authentication and authorization you can disable aaa in the WLC.

no aaa new-model

line vty 0 15

tran input ssh

if you are using AAA new model, then you can follow @JPavonM . In case you are using named auth lists, then you need to call it under the line vty.

line vty 0 15
authorization exec ISE-TACACS-AUTHORIZATION
login authentication TISE-TACACS-AUTHENTICATION
transport input ssh

Re: 9800 SSH issue

felipe.bsilva — Thu, 20 Jul 2023 19:01:03 GMT

In my case of lack of access through SSH, I could call port 22, but the admin user did not have CLI access, and these commands solved my problem, thank you very much.