AAA new-model locks out ssl

[ktravis02]

Hi, I enable aaa on my ISR 4331, and got locked out of ssl. login local was removed from line vty 0 4, and won't allow me to put it back. I found a command, aaa authentication login default local; line vty 04; login authentication default, but those commands are not available on the ISR 4331.

How do I enable aaa and keep SSL access?

Thanks, -ken

[Philip D'Ath · Accepted solution]

I'm thinking you mean ssh access since you keep mentioning "line vty ...".

You should only need to enter this single line:

aaa authentication login default local

I would also add:

aaa authorization exec default local

[ktravis02]

Thanks, that did it.