08-27-2020 03:33 PM
I am trying to get a router to login to radius and i can get it to authenticate successuly but i cant login via ssh
StudmuffinVoiceRouter#$me StudmuffinDC ThePlague Gi604132323 legacy
Attempting authentication test to server-group radius using radius
User was successfully authenticated.
StudmuffinVoiceRouter#show run
Building configuration...
aaa new-model
!
!
aaa group server radius StudsServers
server name StudmuffinDC
!
aaa authentication login default local group StudsServers
aaa authorization console
aaa authorization exec default local group StudsServers
aaa authorization network default local group StudsServers
no ip domain lookup
ip domain name Studmuffin.com
username Studmuffin privilege 15 password 0 ******
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0.20
encapsulation dot1Q 20
ip address 192.168.20.2 255.255.255.0
!
interface GigabitEthernet0/0.100
encapsulation dot1Q 100
ip address 192.168.100.3 255.255.255.0
!
ip default-gateway 192.168.100.1
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 192.168.100.1
radius server StudmuffinDC
address ipv4 192.168.40.50 auth-port 1812 acct-port 1813
key *******
!
!
!
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
logging synchronous
transport input ssh
line vty 5 15
logging synchronous
transport input ssh
!
scheduler allocate 20000 1000
ntp server 34.208.249.133
!
!
pnp profile pnp_cco_profile
transport https ipv4 18.205.167.7 port 443
end
here is my current running config and a video is supplied with what is currently happening
08-28-2020 01:18 AM
Hi there,
You need to re-sequence your AAA statements to consult the radius group before local:
! aaa authentication login default group StudsServers local aaa authorization exec default group StudsServers local aaa authorization network default group StudsServers local !
cheers,
Seb.
08-28-2020 01:39 AM
Your order is Local and Radius, Try using Local username it should work.
if that is working move order radisu and then if fails local ( make sure you test before you write) - if not you going to lock yourself.
08-28-2020 09:53 AM
08-29-2020 08:51 AM
Sadly It still does not work
08-30-2020 09:19 AM
I am interested in the screen shot that shows the attempt to login, has a user name, prompts for a password, and then has a message saying that this line may not run ppp. Can you tell us more about this environment? How did you initiate this connection (if an emulator, which one? if a browser, which one?) and to what address (or interface) did you attempt to connect? Also can you verify that the user name you were attempting to use is configured on this device as a local user with a valid password?
Perhaps it might be helpful if you would post a fresh copy of the configuration.
08-30-2020 09:29 AM
So the Setup is a 2901 Router ( the Device I am Trying to login to) a VMware ESXI Virtual Machine Running windows server 2019 with NPS for radius. and how I am trying to login is by using putty to ssh in to the router and when i login to the router with the radius login i get that error I am a student and I dont know to much about nps and Radius so i am kind of stumped
08-30-2020 10:03 AM
Thanks for the additional information. So you are on an ESXI machine using putty to access the 2901. Can you confirm that there is IP connectivity between the ESXI machine and the 2901 (from a command prompt on ESXI can you successfully ping the 2901?)
Also if there have been config changes on the 2901 can you provide a fresh copy to the config?
08-30-2020 11:11 AM
Everything can ping trust me it is not a connection issue
08-30-2020 02:03 PM
The Last provided config is the latest config
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide