cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1063
Views
0
Helpful
2
Replies

AAA - Username prompt when entering enable mode

normtek
Level 1
Level 1

I have the following config:

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ if-authenticated

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting commands 1 default stop-only group tacacs+

aaa accounting commands 15 default stop-only group tacacs+

aaa accounting network default stop-only group tacacs+

In one of my routers, why am I getting prompted for a username again when going to enable mode while the rest of the routers only prompts me for the enable password?

Thanks!!

2 Replies 2

Richard Burts
Hall of Fame
Hall of Fame

If you have done the obvious - like to be very sure that there is not anything different in the aaa configuration of that router, I would suggest checking how you have that device configured in tacacs - is it in the same group as the other routers, and is it configured with the same parameters as the other routers?

HTH

Rick

This turns out to be a bug on IOS 12.2(4)T1.