2960S - Password required, but none set

[Andreas Schneider]

Hi,

I set a password for the 'VTY lines', the Console, I set an 'enable secret' and an 'enable' password,

but when I log in via ssh I get this:

Switch15>en

Password required, but none set
Password:
Switch15#sh run

Building configuration...

Current configuration : 28178 bytes
!

.....

I type in the 'enable secret' and get into the enable mode...

I always get this "Password required, but none set"! But all passwords are set.

It's a WS-C2960S-48TD-L with IOS Version is 15.0(2)SE2 (C2960S-UNIVERSALK9-M)

What am I missing?

Kind regards,

Andreas

[pk21]

no aaa new-model

line vty 0 4

login local

[InayathUlla Sharieff]

HI Andreas,

You need to specify it under line vty 0 4.

eg:

username cisco secret cisco
enable secret cisco

line vty 0 4
logging synchronous
login local

[Andreas Schneider]

Hi and thanks for the reply,

sorry but there is no option "login local" under 'line vty 0 4' since I use radius authentication(aaa new-model).

I only have "login authentication [WORD | default]".

I tried already to set 'login authentication default' under the 'line vty 0 4'  but no success...

[chucktranhpb]

This must be a cosmetic bug. I get the same message when I SSH into a 3750X with 15.0(2)SE2 and AAA enabled. Disable AAA and the message disappears.

[RICHARD ACOCK]

I think you're right, I get the same on a 3560X running 15.0(2)SE2

>>>>>

Password required, but none set

User Access Verification

Username: cisco

Password:

MySwitch>en

Password required, but none set

Password:

Myswitch#

>>>>>

so everything works apart from our automated scripts

[ALIAOF_]

If you are trying to use the RADIUS authentication there are additional steps, here is my setup and I'm running 15.1(1)SG1

aaa new-model

aaa authentication login vtylogin group radius local

aaa authentication login conlogin group radius local

aaa authentication enable default group radius enable

aaa authorization console

aaa authorization exec vtylogin group radius local

aaa authorization exec conlogin group radius local

!

radius server RADIUS

address ipv4 x.x.x.x auth-port 1645 acct-port 1646

timeout 3

retransmit 3

key xxxxxxxxxxxxxxxxxxxxxxxxx

!

ip radius source-interface vlan200

!

line vty 0 4

exec-timeout 0 5

authorization exec vtylogin

login authentication vtylogin

transport input ssh

[Andreas Schneider]

When I use the 'aaa authentication exec' command it kicks me out immediately after entering the password, so I can't use this option.

The other thing is I need to use the local enable(secret) password for the priv. exec mode.

I tried all other options but no luck.

[Andreas Schneider]

I doesn't matter what I configure, It always brings this message. I doubt it has something to do with the vty lines, because the message comes after typing 'enable':

Switch42>en

Password required, but none set
Password:
Switch42#

[ALIAOF_]

It is possible that the issue is on the RADIUS server.  What are you using for the RADIUS server?

[InayathUlla Sharieff]

Hi Andreas,

It seems that you did not set the password on the “ssh” configuration and that is why you

are receiving the specific message when trying to “ssh” to the switch.

The next configuration is the right configuration to applied:

Switch(config)#line vty 0 15

Switch(config-line)#transport input ssh

Switch(config-line)#password xxxx

Regards

Inayath

[blau grana]

Hi,

try this:

aaa new-model

aaa authentication login default local

aaa authentication enable default enable

username test password test

enable secret test

If this will not work, can you paste your config to see what is wrong?

Best Regards

Please rate helpful posts and close solved questions

[chucktranhpb · Accepted solution]

I'm not the original poster but the aaa authentication enable default enable command solved the problem for me. Rated appropriately. Thank you very much.

[Andreas Schneider]

Hi,

thank you all, the aaa authentication enable default enable does the trick !

Thanks!

Kind regards!

[fngcisco99]

As Chuck said above, it appears to be cosmetic.  When running 15.0(2)SE on a 3560, I had NO problems, but when I upgraded to 15.0(2)SE4, the "Password required, but none set" message pops up.  However, it does still require that I enter the correct password.

So I verified that 15.0(2)SE4 caused this by downgrading back to 15.0(2)SE and the error went away.