Why i can not command show run on cisco switch

[jeerapotb]

 On one switch i found that  some command as these show run or copy running-config tftp: on cisco switch WS-C2960X-24TS-L not work it show follow below. How I can use the command then show as generally.Thank  you.

Building1_FAA_6F_SW3#sh run
Building configuration...

Current configuration : 100 bytes
!
! No configuration change since last restart
!
boot-start-marker
boot-end-marker
!
!
!
!
!
!
end

---------------------------------------------------

Building1_FAA_6F_SW3#copy running-config tftp:
                                               ^  
% Invalid input detected at '^' marker.

[Dennis Mink]

If on the command line you type "?"  what have you got available?

[jeerapotb]

Building1_FAA_6F_SW3#?
Exec commands:
<1-99> Session number to resume
access-enable Create a temporary Access-List entry
access-profile Apply user-profile to interface
clear Reset functions
connect Open a terminal connection
crypto Encryption related commands.
disable Turn off privileged commands
disconnect Disconnect an existing network connection
do-exec Mode-independent "do-exec" prefix support
enable Turn on privileged commands
exit Exit from the EXEC
help Description of the interactive help system
lock Lock the terminal
login Log in as a particular user
logout Exit from the EXEC
name-connection Name an existing network connection
ping Send echo messages
rcommand Run command on remote switch
release Release a resource
renew Renew a resource
resume Resume an active network connection
set Set system parameter (not config)
show Show running system information
ssh Open a secure shell client connection
systat Display information about terminal lines
tclquit Quit Tool Command Language shell
telnet Open a telnet connection
terminal Set terminal line parameters
traceroute Trace route to destination
tunnel Open a tunnel connection
where List active connections

[jeerapotb]

edited.

[jeerapotb]

Sorry,I forget to say that if i connect via console the command can show as normal. this problem occur when i telnet to the switch.

[nspasov]

It looks like AAA is configured for the VTY lines on this device but not the console port. Thus, when you connect via the console you have full access/privilege while via telnet/vty your access is limited. We can confirm this by doing the following:

1. Login to the device via console

2. Issue "show run | i aaa" and post the output here

Thank you for rating helpful posts!

[jeerapotb]

This is the output

#sh run | i aaa
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa authorization commands 7 default local
aaa session-id common

[nspasov]

OK so AAA is definitely configured on the device. Can you also post the following:

show run | sec line

show run | sec radius

show run | sec tacacs

if the above commands do not work then try

show run | b line 

show run | i radius

show run | i tacacs

Also:

show privilege while you are using telnet

show privilege while you are using console

Thank you for rating helpful posts!

[jeerapotb]

the output via console

#sh run | b line
line con 0
password 7 071878184B0310530349582C5D7E7E77
logging synchronous
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password xxxxxxx
line vty 5 15
password xxxxxxx
!
wsma agent exec
profile httplistener
profile httpslistener
!
wsma agent config
profile httplistener
profile httpslistener
!
wsma agent filesys
profile httplistener
profile httpslistener
!
wsma agent notify
profile httplistener
profile httpslistener
!
!
wsma profile listener httplistener
transport http
!
wsma profile listener httpslistener
transport https
!
ap group default-group
end

#sh run | i radius
#sh run | i tacacs

#sh privilege
Current privilege level is 15

the output via telnet

#sh privilege
Current privilege level is 7

[nspasov · Accepted solution]

OK, so the information that you provided in your last posts confirms that the privilege level that you get via telnet/vty is different than the one that you get via console. This is due to the AAA configuration which is applied to the vty ports but not on the console port. 

So if you want the same rules to apply to the console port then you need to configure the console port for AAA as well. 

If you don't want these rules to apply then you need to remove the AAA configurations. The quickest way to remove these is by typing "no aaa new-model" However, be very careful not to lock yourself out of the device. Make sure that you have local accounts with privilege level 15 and that you also know the enabled password/secret. 

I hope this helps!

Thank you for rating helpful posts!

[jeerapotb]

I get it and thank you I really appreciate your help.

[nspasov]

No problem! Let us know if you have any other questions with this. If not, you should mark the thread as "answered" :)

[Antonio Rodriguez]

i do have the same issue while connected via console but still not working and aaa is not activated, and show run command displays partially and workaround is by using ter len 0 but not pretty helpful when trying to display portions of config too often.... any idea?

[ItachiUchiha]

For anyone still getting this problem or a similar issue, I just did the enable command and that worked perfectly.

Have a great day!