Password and username for telnet access cannot apply to switch C9200L-24T-4X

[kulkarni.sanjay]

for Commnuity,

I have a Layer 3 switch  C9200L-24T-4X  which was configured couple of days ago.

It has ssh username and password for remote access.

I am trying to give it a username password for telnet access remotely using ssh.

I am able to give it username and secret password but when I go into the vty lines im not being able to execute the login local command or the login authentication local or login default local .

Router(config)#ena

Router(config)#enable se

Router(config)#enable secret P@$$14&23@dc

Router(config)#line vty 0 4

Router(config-line)#login local

error

                     login authentication local

error

                     login default local 

error

Router(config-line)#exi

AAA does not work as it says passwords and usernames created using AAA will be deprecated use some other type to create username and password.

Please help as I am not being able to create a username and password for that switch for telnet to access remotely.  

[Georg Pauwen]

Hello,

I think the access for VTY lines has changed on the Catalyst 9K switches. You now basically assign a username and password to the VTY lines, or you assign a password to the VTY lines.

enable
configure terminal
line vty 0 15
password password
end

enable
configure terminal
username name [privilege level] {password encryption-type password}
line vty 0 15
end

Check the link below for reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9200/software/release/16-11/configuration_guide/sec/b_1611_sec_9200_cg/controlling_switch_access_with_passwords_and_privilege_levels.html#concept_9D2B80EE3E0840C08E641DA73896402C

[paul driver]

Hello

when you say the iOS says AAA is deprecated what are you configuring

Does it except this?

AAA authentication login default local

[kulkarni.sanjay]

Hi 

I was trying to configure a username and a password using AAA authentication for SSH or elnet 

although it accepts AAA authentication login default local but it gives a warning of passwords and usernames are going get depricated use another method.

So I created a username and a secret password separately after deleting the config above .

Tried to use login local , login authentication local and login default local under line vty 0 4 but it does not accept any of those.

Hence wether it is AAA authentication or line vty 0 4 I am not being able to create username password for that switch to access it remotely

[paul driver]

Hello
If you apply the following does it get accepted.

username Adm1n privilege 15 secret Pa55w3rd
aaa new-model
aaa authentication login default local-case
aaa authorization exec default local if-authenticated

crypto key generate rsa label LOCAL-KEY modulus 2048

line vty X X
transport input telnet ssh