Cisco Switch 3850

[fmugambi]

Hello Team,

Why dont i have an option to configure "login local" under line con 0, on cisco catalyst switch 3850?

[M02@rt37]

Hello @fmugambi 

Do you configure AAA protocol ?

If yes, login local is no more available. You need login authentication <default> command instead.

[MHM Cisco World]

two topic 
1- VTY not work with config (you share) this I will answer today 
2- this issue 
login local is disappear as soon you config aaa new-model 
but you can use 

login 
password 

this allow to access console without add username, 

NOTE:- we here try to config line permit or deny access to device 
so dont WR any change, if we wrong we can reboot and you can return to previous point and access to SW
be careful any wrong maybe lead you to password recovery or factory reset 

MHM

[balaji.bandi]

You may try below syntax :

username balajiadmin password youguesscorrect priv 15
aaa authentication login CONSOLE local
aaa authorization exec CONSOLE if-authenticated
!
line con 0
login authentication CONSOLE

Refer below guide :

https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_0101110.html

[Blue_Bird · Accepted solution]

Hi  fmugambi,

As other memebers mentioned, the login local command won't work...if switch is enable with aaa new-model command

If you want to logging into the switch only as local user ( in Lab or Test environment)...you can disable remote authentiction using no aaa new-model, I think it is not recommended in production environment... it's based on the scenario.

Here is the sample configuration for local authentication....

conf t

no aaa new-model

username user_name priv 15 secret password

line vty 0 4

login local

trans in all

exec-t 5 0

end

wr

If you can't go with disabling remote authentication use following aaa commands...

Switch(config)# username your_user_name privilege 15 password 7 secret567

Switch(config)# aaa authentication login default local

Switch(config)# line console 0

Switch(config-line)# login authentication default

Switch(config-line)#end

Best regards
******* If This Helps, Please Rate *******