can't login to ISE 2.6 via ssh

[as00001111]

Hi,

I deployed virtual ISE 2.6 and did the initial setup.

During setup I had to define a password.

After the setup, I logged into webinterface. Manual says that I will be asked to change the password, but I wasn't.

So I went to Administration -> Admin Access -> Administrators -> Admin Users and changed the password.

Now I can login to the webinterface with the new password.

But I cannot login via ssh. Neither with new password, nor with password set during initial setup.

Can you help me?

[balaji.bandi]

what happends if you loging using VMWARE Console same username and password.

by the way what username you using for SSH ?

if you have access to GUI you can see the events, what events you see ?

[as00001111]

I was able to login via vmware console.

After that I tried ssh and that worked, too.

That's strange.

[tsme]

Hi,

you have two types of users:

1. CLI user (you can use to connect via SSH)
2. GUI user (Admin user to administrate your ISE-deployment)

In the initial setup (Step 2) you were asked to give a username (for CLI user) - if not set default = admin

You have to use that specific user and its PW to connect via SSH.

[as00001111]

I don't know why but now it worked. My pw consists of 6 characters so it's not really possible to make a typo.

I tried it 10 times.

Can you tell me how change the password of the cli user?

[balaji.bandi]

Login as admin and use the command "password"

Other note : change the password policy settings not to lock after default perioid.

[as00001111]

Hi,

do I need to do a "wr" after changing the password?

Does ISE act like a switch?

[balaji.bandi]

No, once you change the password using password command it is changed.

make sure you change the password policy as suggested. 

[tsme]

hi,

If you can successfully login and just want to change your password, you simply type password and change your password.

ciscoISE01/my_newUser# password 
Enter old password: 
Enter new password: 
Confirm new password: 
ciscoISE01/my_newUser#

If you have a colleague (CLI-user) who forgot its password, you can do overwrite the user credentials in config.

ciscoISE01/my_newUser# sh run | i username
username my_newUser password hash $5$KrbvrSFS$lw4TaTmWM3272mvmboNNc/xO4u0DiJW3opdOjwPUB36 role admin 
username my_colleague password hash $5$mwnjMpxw$rGaUFZkQ0pvkWUoIIU.YOqxZw07l9yVIhF62cdK78wB role admin
ciscoISE01/my_newUser#

ciscoISE01/my_newUser# conf t
ciscoISE01/my_newUser(config)# username my_colleague password plain yourNewPassword1 role admin
ciscoISE01/my_newUser(config)# end

Please rate if this post was helpful