cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Popup Hotspot Using ISR 1000 with WiFi/LTE for Teleworkers and Micro Branchesr
226
Views
5
Helpful
4
Replies
Highlighted
Beginner

how to change telnet password with aaa authentication method already configured switch 4507R

how i can change telnet password with aaa authentication method configured already with below config.

 

 

 

 

logging queue-limit 2000
logging buffered 16384 informational
logging rate-limit all 1000 except errors
no logging console
enable secret 4 xxxx
!
username xxxx privilege 15 password 7 xxxxx
aaa new-model
!
!
aaa authentication login default local
aaa authentication login VTY_authen local
aaa authorization console
aaa authorization exec default local
aaa authorization exec VTY_author local

 

line vty 0 4
exec-timeout 30 0
authorization exec VTY_author
logging synchronous
login authentication VTY_authen
transport input all
transport output all
line vty 5 15
exec-timeout 5 0
authorization exec VTY_author
logging synchronous
login authentication VTY_authen
transport input all
transport output all

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Participant

Re: how to change telnet password with aaa authentication method already configured switch 4507R

Hi,

Your are highly recommended to remove the coded password from your post!! In which could be revert back to clear text easily.

username <REMOVE> privilege 15 password 7 <REMOVE>

---

Corresponding to your question, the line vty was configured to use "aaa login VTY_authen"

where VTY_authen is using local user database to authenticate user. You could simply change the password for local users:

username <USERNAME> privilege 15 secret <NEW_PASSWORD>

Then login telnet with the new username/password.

View solution in original post

4 REPLIES 4
Highlighted
Participant

Re: how to change telnet password with aaa authentication method already configured switch 4507R

Hi,

Your are highly recommended to remove the coded password from your post!! In which could be revert back to clear text easily.

username <REMOVE> privilege 15 password 7 <REMOVE>

---

Corresponding to your question, the line vty was configured to use "aaa login VTY_authen"

where VTY_authen is using local user database to authenticate user. You could simply change the password for local users:

username <USERNAME> privilege 15 secret <NEW_PASSWORD>

Then login telnet with the new username/password.

View solution in original post

Highlighted
Beginner

Re: how to change telnet password with aaa authentication method already configured switch 4507R

Hi ngkin,

 

Thanks for your reply..

Your solution bit works,as i want to change the password only and username will be the same old one.

 

regards

 

Highlighted
VIP Mentor

Re: how to change telnet password with aaa authentication method already configured switch 4507R


@AsherKhan7176 wrote:

Your solution bit works,as i want to change the password only and username will be the same old one.


conf t
username <same username> privilege 15 password <new password>

However @ngkin2010  is correct suggest you should change from a clear text password to a md5 authentication one

conf t
no username <same username>
username <same username> privilege 15 secret  <new password>



kind regards
Paul

Please rate and mark posts accordingly if you have found any of the information provided useful.
It will hopefully assist others with similar issues in the future
Highlighted
Collaborator

Re: how to change telnet password with aaa authentication method already configured switch 4507R

Hi,

 

   The VTY line telnet password is configured via "password" command, under "line vty". However, if you use username/password authentication, as you currently do, it means telnet is authenticated via username/password, so the line password is ignored. If you want to authenticate via line password by using AAA, do the following changes:

     aaa authentication login VTY_PASS line

     line vty 0 15

         login authentication VTY_PASS

 

Regards,

Cristian Matei.

CreatePlease to create content
Content for Community-Ad