cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

499
Views
0
Helpful
3
Replies
CSCO11589626
Beginner

1841 AAA Authenication "Error in Authentication"

Hello All,

   I have an 1841 that was working fine - I could SSH to it with my Radius login and console into it with local credentials ("Fred").

   I added another use ("Mike") with priv 15 so the end user could log in locally via console if needed.

   After that, we can both log in via console, but when we try to enter privileged mode we get "% Error in Authentication", before even entering the   password.

   I can still log in via Radius SSH with no problems and access privilege mode via SSH.

   What am I missing so we can have two different users be able to log in locally with different credentials and access privileged mode, and keep my ssh radius working?

   Relevant snipets of config are below.

Thanks a ton,

Martin

  

aaa new-model

!

!

aaa authentication login default local

aaa authentication login RSA group radius local

aaa authorization exec RSA group radius local

!

aaa session-id common
!
!

username Fred privilege 15 password 7 12490333410D5F0A6E78

username Mike privilege 15 password 7 1209040401485D5679

radius-server host x.x.x.x auth-port 1645 acct-port 1646 timeout 10 key 7 ****************

line con 0

session-timeout 5

line aux 0

session-timeout 5

line vty 0 4

session-timeout 5

privilege level 15

authorization exec RSA

login authentication RSA

transport input ssh line con 0
session-timeout 5
line aux 0
session-timeout 5
line vty 0 4
session-timeout 5
privilege level 15
authorization exec RSA
login authentication RSA
transport input ssh

3 REPLIES 3
Jatin Katyal
Cisco Employee

You need to make a change

line con 0

privilege level 15

Jatin Katyal


- Do rate helpful posts -

~Jatin

OK, Thanks. I did not think of that.

I made the change, and I'll have the user try.

Thanks again -

Martin

sure!!!

Jatin Katyal


- Do rate helpful posts -

~Jatin
Content for Community-Ad