2960x catalyst switch would not accept the basic commands

[kashif.ahmad837]

I have a new 2960X(Stack Switch). I copied running config from 3650 and ran it on 2960. the config ran smoothly but now I am not able to run the following commands on the switch:

"show run"

"config t"

Any Idea?

[Georg Pauwen · Accepted solution]

How do you access the switch ? Telnet or console access ? This sounds like your access method has been configured with a lower privilege level.

line con 0

privilege level

line vty 0 4

privilege level

Check the running config of the 3650 for these lines.

[kashif.ahmad837]

I am accessing the switch via console cable. the privilege level is 15. I was able to run the commands the issue occurred after applying the config. I am not able to run the commands like show run,

[Palani Mohan · Accepted solution]

Hi Kashif

Please do not get me wrong. For problems like this, it helps (in a significant way) if you include the session log and the show tech. Otherwise, the responses are going to be speculative in nature. Whenever there is speculation, it is extremely easy to poke holes. Thank you.

At the console, the OS (in this case IOS) is expected to provide some feedback, by default. Please check your config (3650 you copied from or show start from the 2960), to see if "no logging console" is present in the config.

Kindly consider attaching the session log when you type the cmds along with show tech and show log, to help make progress.

Kind regards ... Palani

[kashif.ahmad837]

attached is the complete config I applied on 2960, do check the config file

[Palani Mohan · Accepted solution]

Ok, the problem is very apparent when evidence is included:

SW-MEDCAREEH-2#config t
                  ^
% Invalid input detected at '^' marker.
MEDCAREEH-2#
SW-MEDCAREEH-2#erase startup config
                ^
% Invalid input detected at '^' marker.

SW-MEDCAREEH-2#reload
Translating "reload"

You do not have enough privileges to execute the cmds. Reviewing the config you provided, I see the following:

SW-MEDCAREEH-2(config)#aaa new-model
SW-MEDCAREEH-2(config)#aaa authentication login default local
SW-MEDCAREEH-2(config)#aaa authorization exec default local

When you copy/paste the config, remove the above cmds (alone) and copy/paste the rest. You should be able to access as you expect.

The aaa cmds especially authorization require a deeper understanding before implementing them.

NOTE: The same cmds are working on the 3650 because it is a (likely) working device and has IP connectivity to the AAA server. The new one 2960 (likely) does not have IP connectivity to the AAA server.

I hope this helps ... Palani

[kashif.ahmad837 · Accepted solution]

Hello Palani

this was a big helps, thank you so much. I know what the problem is now.

I also found this line in the config.

line con 0
 exec-timeout 0 0
 privilege level 2

thanks for making my life easy :)

[Palani Mohan]

Hi Kashif

You (and gpauwen) were correct. The problem line was privi cmd under line con 0.

Glad it worked out.

Kind regards ... Palani