I keep locking myself out of a switch on CML when configuring line con

[BruteForce]

I'm trying to do something simple and I keep logging myself out. Here are the commands I enter in this order.

>username cisco privilege 15 secret 5 cisco

>aaa new-model
>aaa authentication login default local
>aaa authorization exec default local if-authenticated

>line con 0
>login authentication default

At this point I can log completely out, but then I get an authentication failed when trying to log back in. I KNOW I'm not fat fingering the password or adding an extra space after it. Also when I type "sh run | s line", the command I added under line con 0 does not appear. exec-timeout 0 0 will appear though.

[MHM Cisco World]

You use local database user/password or radius?

[BruteForce]

Local database

[BruteForce]

Well, it looks like it's because I'm specifying secret 5 instead of secret. If I use secret 5, I'm I supposed to enter the hashed password you'd see on a "sh run" command?

[M02@rt37 · Accepted solution]

@BruteForce 

When using the secret 5 option in the username command, you should enter the hashed password directly. The hashed password is the encrypted form of the actual password...

[MHM Cisco World]

Use password only without 

Secret or secret 5

And check 

MHM

[MHM Cisco World]

You can access but you  can not go to conf t ?

If this case here ?

[M02@rt37]

@BruteForce 

Log first

Do: debug aaa authentication and terminal monitor

Open a new ssh session and see debug.

[MHM Cisco World]

not end yet 

Please try below

username cisco privilege 15 secret 5 cisco

Then show running 

Share running here

Waiting your reply

MHM

[BruteForce]

Hello, the issue was "Secret 5" rather than "Secret". I didn't attempt to input the password in the running config, but I removed "secret 5" and was able to log in just fine. 

[MHM Cisco World]

You are learning so you must not skip any info.

You config is correct 

As I know we can add unencrypted passwords in config 

But when we show run it appear as encrypt 

Then we use what appear in config to access device.

MHM