cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
16586
Views
5
Helpful
2
Replies

Ip ssh login Issue - %error in authentication

ITexpert
Level 3
Level 3

Hello Guys,

 My ssh stops working.

I connect with IP is ask for credentials and accept it without any error. After that i type enable and press enter, it shows error message % Error in authentication.

 

attached is my config of switch:

 

Switch(config)#
Switch(config)#sh    do sh run
Building configuration...

Current configuration : 4439 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
username manager privilege 15 secret 5 $1$BMtO$NjKHg8qWdlDs5qAPGJoVJ1
!
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication dot1x default group radius
--More--  aaa authorization network default group radius
!
!
!
aaa session-id common
system mtu routing 1500
vtp mode transparent
!
!
ip domain-name lovejit.com
!
!
crypto pki trustpoint TP-self-signed-204040832
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-204040832
revocation-check none
rsakeypair TP-self-signed-204040832
!
!
crypto pki certificate chain TP-self-signed-204040832
certificate self-signed 01
30820248 308201B1 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
--More--   69666963 6174652D 32303430 34303833 32301E17 0D393330 33303130 30303135
375A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3230 34303430
38333230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
CABC3B2D FCEDA6F3 7A892854 3570203A B2D3E55E C0999869 A9A548E9 B134C65C
18E0EB75 4F9E1E55 FDEF91BE 4FB0104C 11FE0F16 97BD192B A73468FA BCADBD83
732B2430 FFC4807A 3C90A9A7 9E35BF1C 7946FE42 9E561E38 AF233D44 03E3695B
DAF2CA55 0061EA3D D5FF27E7 143F5C6E 76B72423 168BC32E 4A201DD6 9EEBAA8D
02030100 01A37230 70300F06 03551D13 0101FF04 05300301 01FF301D 0603551D
11041630 14821253 77697463 682E6C6F 76656A69 742E636F 6D301F06 03551D23
04183016 8014E8A3 B81039ED 9ED18181 B29F3DBB 8B2B0FF3 CC1E301D 0603551D
0E041604 14E8A3B8 1039ED9E D18181B2 9F3DBB8B 2B0FF3CC 1E300D06 092A8648
86F70D01 01040500 03818100 5BF6D28F 0E601961 9BC60A06 529302E5 D5EDC320
3C719C0A 2CFEFA76 502DA7B1 2E592E65 1CA79BF7 97D19C59 F2F3C7F5 54DD329F
934B0A43 271FCE9C 2A8D9586 E146D5C4 3D00BA74 A517860D EDD2F940 0EA37534
79B9031E 16A4F219 CF0CAA64 0B99D391 EABB7B1B EE401D0D 7376F73A 08AC0106
9553F9CA AA449824 C9FED83F
quit
dot1x system-auth-control
!
!
!
spanning-tree mode pvst
--More--  spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 10
name test1
!
vlan 20
name test2
!
vlan 30
name test3
!
vlan 40
name guest-vlan
!
ip ssh version 2
!
!
interface GigabitEthernet0/1
switchport access vlan 10
switchport mode access
!
--More--  interface GigabitEthernet0/2
switchport access vlan 20
switchport mode access
!
interface GigabitEthernet0/3
switchport access vlan 30
switchport mode access
!
interface GigabitEthernet0/4
switchport access vlan 20
switchport mode access
!
interface GigabitEthernet0/5
switchport access vlan 40
switchport mode access
!
interface GigabitEthernet0/6
switchport access vlan 40
switchport mode access
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
--More--  !
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
switchport access vlan 10
switchport mode access
authentication event no-response action authorize vlan 40
authentication host-mode multi-host
authentication port-control auto
dot1x pae authenticator
spanning-tree portfast
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
--More--  !
interface GigabitEthernet0/17
!
interface GigabitEthernet0/18
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
!
interface GigabitEthernet0/24
switchport mode trunk
!
interface Vlan1
ip address 192.168.1.5 255.255.255.0
ip helper-address 192.168.10.99
no ip route-cache
!
--More--  interface Vlan10
ip address 192.168.10.2 255.255.255.0
ip helper-address 192.168.10.99
!
interface Vlan20
ip address 192.168.20.2 255.255.255.0
ip helper-address 192.168.10.99
!
interface Vlan30
ip address 192.168.30.2 255.255.255.0
ip helper-address 192.168.10.99
!
interface Vlan40
ip address 192.168.40.2 255.255.255.0
ip helper-address 10.10.10.51
!
ip default-gateway 10.10.10.51
ip http server
ip http secure-server
radius-server host 192.168.10.99 auth-port 1645 acct-port 1646
radius-server key cisco
no vstack
!
--More--  line con 0
line vty 0 4
transport input ssh
line vty 5 15
!
end

Switch(config)#

 

 

 

1 Accepted Solution

Accepted Solutions

Hi,
It doesn't appear that you have defined an enable password. You will get this error if you don't configure one

HTH

View solution in original post

2 Replies 2

Hi,
It doesn't appear that you have defined an enable password. You will get this error if you don't configure one

HTH

Hi, i am facing the same issue. Is it possible to console to the device and add enable password or i have to reboot and reset from from confreg?

 

Review Cisco Networking for a $25 gift card