Hi there!
I want to enter Enable-Mode directly after loggin in on the switch.
At the moment I've reduced my aaa config to a very basic setup:
------------------------------------
aaa group server tacacs+ TACSERV
server192.168.0.1
tacacs-server host 192.168.0.1 key some_key
username rescue_user secret rescue_passwd
aaa authentication login default group TACSERV local line
aaa authentication enable default group TACSERV enable line
------------------------------------
The reason why I want to go to level 15 is the following: if I want to authenticate "enable" via tacacs I have to define a user "$enable$" in the tacacs config. Now it is possible to login on the switch with username "$enable$.
So everyone could start a dictionary attack with username "$enable$".
How is it possible to go directly to enable mode after logging in?
Regards,
Fred