So we are using the SF300-08 in our environment as desktop switches.
We have them set to use SSH for logins and we use TACACS for authentication and enable levels.
We use Cisco Prime to back up and manage all of our networking devices.
The prob I am having is that when you SSH you get a login prompt
login as:
I can put anything in there and it moves then to the TACACS authentication where you login, get authenticated and go along you merry way.
The issue is that Cisco Prime doesn't handle this extra prompt.
How do I get rid of that first initial prompt? I have checked on here and have not seen a good result for me so far.
Thanks for any help.
Jeff
Copy of config below:
v1.3.5.58 / R750_NIK_1_35_647_358
CLI v1.0
set system mode switch
file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
cdp device-id format hostname
vlan database
vlan 8,15,50
exit
voice vlan state disabled
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
hostname venimc01swp01
management access-list Mgmt_Access
permit ip-source xxx.xxx.xxx mask xxx.xxx.xxx.xxx service ssh
permit ip-source xxx.xxx.xxx service snmp
permit service https
deny service http
exit
management access-class Mgmt_Access
logging host xxx.xxx.xxx
logging buffered 400 debugging
logging console warnings
ip http authentication aaa login-authentication tacacs local
aaa authentication login SSH tacacs local
aaa authentication enable SSH tacacs enable
aaa authentication login Telnet tacacs local
aaa authentication enable Telnet tacacs enable
aaa authentication login Console tacacs local
aaa authentication enable Console tacacs enable
aaa authentication enable default tacacs enable
line telnet
login authentication Telnet
enable authentication Telnet
password kjhkhkhh encrypted
exit
line ssh
login authentication SSH
enable authentication SSH
password kjhkhkhh encrypted
exit
line console
login authentication Console
enable authentication Console
password kjhkhkhh encrypted
exit
enable password level 15 encrypted kjhkhkhh
no passwords complexity enable
username admin password encrypted kjhkhkhh privilege 15
ip ssh server
no ip http server
tacacs-server host xxx.xxx.xxx timeout 5 priority 1
tacacs-server host xxx.xxx.xxx timeout 5
clock timezone CST -6
clock summer-time CDT recurring usa
sntp server xxx.xxx.xxx
sntp server xxx.xxx.xxx
ip domain name ameren.com
ip name-server xxx.xxx.xxx xxx.xxx.xxx xxx.xxx.xxx xxx.xxx.xxx
ip telnet server
!
interface vlan 15
ip address xxx.xxx.xxx xxx.xxx.xxx
no ip address dhcp
!
interface fastethernet1
description uplink_port
no spanning-tree portfast
switchport trunk allowed vlan add 8,15
switchport trunk native vlan 50
!
interface fastethernet2
switchport mode access
switchport access vlan 8
no cdp enable
!
interface fastethernet3
switchport mode access
switchport access vlan 8
no cdp enable
!
interface fastethernet4
switchport mode access
switchport access vlan 8
no cdp enable
!
interface fastethernet5
switchport mode access
switchport access vlan 8
no cdp enable
!
interface fastethernet6
switchport mode access
switchport access vlan 8
no cdp enable
!
interface fastethernet7
switchport mode access
switchport access vlan 8
no cdp enable
!
interface fastethernet8
switchport mode access
switchport access vlan 8
no cdp enable
!
exit
ip default-gateway xxx.xxx.xxx
