cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
2521
Views
0
Helpful
2
Replies

SF-300 TACACS+ Enable not working

craig.amos
Level 1
Level 1

Running  SF-300 24 port non-POE (model # SRW224G4-K9 V01) firmware 1.1.2.0

Configured TACACS+ support for login via TELNET and SSH.

CLI allows connection to non-privledged mode on TELNET via TACACS, but when Iattempting to enter privledge mode the connection is rejected.

Had to set the enable mode to use the enable password which is less than ideal.

See attached file for commands

Is anyone else having this issue?

2 Replies 2

Flaming Badger
Level 1
Level 1

From CLI as a Priv15 user,

conf t

line telnet

no enable authentication

Hope this helps,

Iain.

I tried "no enable authentication" as recommended and get this in my local log:

%AAA-W-REJECT: New ssh connection, source 10.37.6.124 destination 10.36.12.247  REJECTED

When putting back on "enable authentication ssh" tacacs show user $enab15$ trying to login. Can I change it to use the username accessing the system?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Switch products supported in this community
Cisco Business Product Family
  • CBS110
  • CBS220
  • CBS250
  • CBS350
Cisco Switching Product Family
  • 110
  • 200
  • 220
  • 250
  • 300
  • 350
  • 350X
  • 550X