cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
366
Views
5
Helpful
1
Replies

Avoid requirement for ENABLE password ?

tedauction
Level 1
Level 1

Hello, how can I avoid the need to enter an enable password upon login. 

Here is my config:

 

Current configuration : 2297 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
username support privilege 3 secret 5 $1$e1En$YNav/fS5tV6T6.4L60u9c0
username myUser privilege 15 secret 5 $1$FDqZ$KjKCKXKMOINDCnfne2/VE/
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication login CONSOLE local
aaa authentication enable default group tacacs+ enable
aaa authorization config-commands
aaa authorization exec default local if-authenticated
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
aaa session-id common
system mtu routing 1500
ip subnet-zero
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0/1
switchport trunk allowed vlan 57
switchport mode trunk
!
interface Vlan57
ip address 10.100.7.57 255.255.255.0
no ip route-cache
!
ip default-gateway 10.100.7.1
ip http server
ip tacacs source-interface Vlan57
tacacs-server host 10.21.250.212
tacacs-server timeout 10
tacacs-server directed-request
tacacs-server key RUc=U@3.n6:`%aZP3~nV
!
control-plane
!
line con 0
line vty 5 15
!
end

1 Reply 1

Hello!

 

The only way that i know is to send "priv-lvl" AVP with value of 15 from tacacs server to the NAS.

Read more:

https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13860-PRIV.html

 

Review Cisco Networking for a $25 gift card