Urgency Security Issue...

[hyukin.kwon]

Hi all,

Recently Many Cat3524 hacked and Configuration has changed , especially on Username and Password changed..

So I tried to erase ID and password, but I can't..

In the configuration, there is not Username & password. but I trying to connect the switch with telnet. Username appears again...

What is happening my switch..

Thanks in advance...

[glen.grant]

It sounds like someone has implemented tacacs . That's what you get with tacacs access is a username and password and this would not show up in the config but you should see some AAA commands if tacacs is enabled .

[dbellaze]

If login local is configured on your VTY's it will prompt for a username even if there isn't one configured.

Example-

line vty 0 4

login local

If you want to just be able to telnet and supply a password then remove login local and configure a password.

Example-

line vty 0 4

no login local

password cisco

But if AAA is configured for login then you will see a username prompt too.

Daniel