username and password in router

[netmaniac]

I am working as Network Admin, and our security team is insting on username and password for all the admin in our team, is this possible with out having Tacacs server,,,,currently we have IP based access list for admins......

[dbellaze]

Yes you can configure username and passwords locally on the router.

For example

router(config)#username admin password secret

Daniel

[netmaniac]

Thanx for the reply mate..

I configured username and password but still when I do a telnet it is not asking me for username and password which I configured succesfully

config t

usernmae xyz password cisco123 line vty 0 4

as per my understaning now whenever i do a telnet it should ask me for username and password which is not happening.... I also gave priveleg of 15......

any suggestions

[abdulma]

try this

username xyz password

line vty 0 4

login local

[Richard Burts]

The combination of username password with login local should give you the functionality that your security team wants. You probably want the login local on all your vty ports and on the console.

You also want to be sure that you have configured no aaa new-model (or you can configure aaa new-model and then configure aaa authentication login default local and aaa authentication enable default enable). login local does not work with aaa new-model.

You will need to configure this on each router and switch in the network. And as there are changes in personnel you will need to update each device. Which is one of the reasons why authentication servers (running tacacs+ or radius) can be very helpful in reducing network maintanance activity and enhancing security.

HTH

Rick

[thisisshanky]

You can use a server like Cisco ACS to support user auth. for authenticating admins logging into network devices. Know that TACACS+ is a Cisco proprietary protocol.

http://www.cisco.com/en/US/tech/tk583/tk642/tsd_technology_support_sub-protocol_home.html

Edit

----

I should have probably read the question properly. The post above answers your question!