PROBLEM LOCAL AUTHENTICATION IN CISCO CATALYST 9200

[motas]

Hello everyone, I have a cisco catalyst 9200, it has created an admin user with a defined password, but in addition to the admin user, when logging in with any other different credentials it works.

example :
user : XYZ
password: uhbfuew
It works, how to block it? I just want the admin user to be able to log into this device.

Follow config:
aaa authentication login default local group radius
aaa authorization exec default local group radius

[marce1000]

 - Make sure to have a unique admin user defined in the running-config too as in :
                             username <admin_username> privilege 15

 M.

[MHM Cisco World]

can you more elaborate what issue here >?

[motas]

My equipment has only one user, which is the admin user, but when entering via ssh and placing any character, it allows it and enters user configuration mode.

[MHM Cisco World]

are you use ISE as radius server ??

[marce1000]

           - Post the full running config of  the  9200 ,

 M.

[motas · Accepted solution]

Hello everyone,

Sorry for the delay in response, the problem has been resolved, we identified that the security flaw was in the radius server, we removed it from the AAA settings on the switch and the problem was solved.

Previous configuration:

aaa authentication login default local group radius 

aaa authorization exec default local group radius

New configuration:

aaa authentication login default local 

aaa authorization exec default local

Thank you all for your help.

[abdelmadjid.gueffaz]

Your device was trying to authenticate from a radius server and now you change it to local if you want to create a new user now just do this command username admin privilege15 secret yourpassword