access to enable mode via SSH without password ?

[ocsic_user]

Hello,

In our company we have two sites first we work on it and the second far from us 700 km usually I mange second site routers via SSH but recently we lost access so our engineer moved to the second site and remove all users & passwords from rom-mon and he create one user privilege 15.

when he returned we tried to access when we enter enable it showed this error " % error in authentication "

in summary I can access from console but not from SSH

please I want to ask if is there any possibility to access with SSH without moving to the second site

thank you.

[MHM Cisco World]

if you use AAA then this issue can solved but I need to see config first 

MHM

[ocsic_user]

hello 

yes we have aaa server local configured  is the router 

aaa new-model
aaa local authentication attempts max-fail 5
!
!
aaa authentication login default local
!

BR

[MHM Cisco World]

the user have privilege set ? i.e. the local user it enter like below 
username xxx privilege 15 password xxx <<- 
if not add new user and  set it privilege to 15 and check again 

MHM

[ocsic_user]

hello

yes user privilege  15 already aded  and the site is far from here so i can't access with the console

[ocsic_user]

hello 

is there any solution  to get in privileged exec mode ?

[MHM Cisco World]

There is 

Aaa authorization exec defualt local 

This command check the privilege for user in local dB to make user enter level 15 directly no need enable. 

But you need to be careful 

Dont wr the config until you sure that this command help you if it reject access to router via console then you can reboot and return to previous point before add the command. 

If you wait me I need to do some lab and share result here. 

MHM

[ocsic_user]

We are enable to execute any command because we are in user-exec mode. The command you just gave us doesn't work. Is there a workaround ? 

[MHM Cisco World]

You need also additional to previous command

line vty 0 4

authorization exec defualt

Other solution is use 

Line vty 0 4 

Privilege 15 <<- this make any user access level 15

Hope this what you looking for

MHM

[MHM Cisco World]

any update ?

MHM

[ocsic_user]

hello 

no update  i can't execut that commande this mode "Router>"  

[MHM Cisco World]

[ocsic_user]

thank you @MHM Cisco World 

i'm stucked in User exec mode  mode  tomorrow i will give you feedback 

[Charlie Moreton]

It's time to drive out there.