9800 SSH issue

[id404]

The local user level is 15, but after ssh login I still need to enter the enable password, is there any way to ssh login without entering the enable password?

username tempuser privilege 15 password 7 XXXXXXXXXXXX

line vty 0 4
privilege level 15
length 0
transport input ssh
line vty 5 15
privilege level 15
transport input ssh

[Sandeep Choudhary]

Hi,

I am having this setting and its not asking enable password while login using ssh.

line vty 0 4
length 0
transport input ssh
transport output ssh
line vty 5 15
transport input ssh
transport output ssh

Regards

Dont forget to rate helpful posts

[id404]

Referring to the gif I just uploaded, I need to enter the enable password on my device

[JPavonM · Accepted solution]

Have you tried adding this?

aaa new-model
aaa authentication login default local
aaa authorization exec default local

HTH
-Jesus
*** Please rate helpful responses ***

[id404]

Have tried, but nothing works

[Rich R]

You did not show your aaa config - did you do what @JPavonM suggested?

No need to set priv on the VTY, that comes from aaa and user config.

[felipe.bsilva]

In my case of lack of access through SSH, I could call port 22, but the admin user did not have CLI access, and these commands solved my problem, thank you very much.

[Arshad Safrulla]

If you are not using any TACACS or Radius servers for admin authentication and authorization you can disable aaa in the WLC.

!

no aaa new-model

line vty 0 15

 tran input ssh

 login local

!

if you are using AAA new model, then you can follow @JPavonM . In case you are using named auth lists, then you need to call it under the line vty. 

!

line vty 0 15
authorization exec ISE-TACACS-AUTHORIZATION
login authentication TISE-TACACS-AUTHENTICATION
transport input ssh

!