04-25-2007 09:14 AM - edited 03-10-2019 03:07 PM
Hi, I have a problem with switch 2948 CatOS 6.x, i can?t enter to the device, the firts I was blocking in the router the address of tacacs server and then i used a local user but it doesn?t work.
Username: tcom
Enter PASSCODE:
% Authentication failed.
Username: me167185
Authentication function reports error condition
So the only form to enter the switch is using Solar Winds with the snmp comunnity, I put the configuration on a txt file.
Could you help me, with two things, first what was wrong in the configuration and second who can I disable all authentification , and only use a normal password to enter to the device
thanks
Manuel
04-25-2007 09:15 AM
I forget the configuration
#tacacs+
set tacacs server 165.197.192.173
set tacacs server 165.197.85.14 primary
set tacacs attempts 3
set tacacs directedrequest disable
set tacacs key PMSC/IT.2005
set tacacs timeout 5
#authentication
set authentication login tacacs disable console
set authentication login tacacs enable telnet primary
set authentication login tacacs disable http
set authentication enable tacacs disable console
set authentication enable tacacs enable telnet primary
set authentication enable tacacs disable http
set authentication login radius disable console
set authentication login radius disable telnet
set authentication login radius disable http
set authentication enable radius disable console
set authentication enable radius disable telnet
set authentication enable radius disable http
set authentication login local enable console
set authentication login local enable telnet
set authentication login local enable http
set authentication enable local enable console
set authentication enable local enable telnet
set authentication enable local enable http
set authentication login kerberos disable console
set authentication login kerberos disable telnet
set authentication login kerberos disable http
set authentication enable kerberos disable console
set authentication enable kerberos disable telnet
set authentication enable kerberos disable http
set authentication login attempt 3 console
set authentication login attempt 3 telnet
set authentication login lockout 0
console
set authentication login lockout 0 telnet
set authentication enable attempt 3 console
set authentication enable attempt 3 telnet
set authentication enable lockout 0 console
set authentication enable lockout 0 telnet
#authorization
set authorization exec enable tacacs+ if-authenticated console
set authorization exec enable tacacs+ if-authenticated telnet
set authorization enable disable console
set authorization enable disable telnet
set authorization commands enable all tacacs+ if-authenticated console
set authorization commands enable all tacacs+ if-authenticated telnet
thnks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide