tacacs problem

Unanswered Question
Apr 25th, 2007
User Badges:

Hi, I have a problem with switch 2948 CatOS 6.x, i can?t enter to the device, the firts I was blocking in the router the address of tacacs server and then i used a local user but it doesn?t work.

Username: tcom

Enter PASSCODE:

% Authentication failed.

Username: me167185

Authentication function reports error condition


So the only form to enter the switch is using Solar Winds with the snmp comunnity, I put the configuration on a txt file.


Could you help me, with two things, first what was wrong in the configuration and second who can I disable all authentification , and only use a normal password to enter to the device


thanks


Manuel

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
ocajica Wed, 04/25/2007 - 09:15
User Badges:

I forget the configuration


#tacacs+

set tacacs server 165.197.192.173

set tacacs server 165.197.85.14 primary

set tacacs attempts 3

set tacacs directedrequest disable

set tacacs key PMSC/IT.2005

set tacacs timeout 5


#authentication


set authentication login tacacs disable console


set authentication login tacacs enable telnet primary


set authentication login tacacs disable http


set authentication enable tacacs disable console


set authentication enable tacacs enable telnet primary


set authentication enable tacacs disable http


set authentication login radius disable console


set authentication login radius disable telnet


set authentication login radius disable http


set authentication enable radius disable console


set authentication enable radius disable telnet


set authentication enable radius disable http


set authentication login local enable console


set authentication login local enable telnet


set authentication login local enable http


set authentication enable local enable console


set authentication enable local enable telnet


set authentication enable local enable http


set authentication login kerberos disable console


set authentication login kerberos disable telnet


set authentication login kerberos disable http


set authentication enable kerberos disable console


set authentication enable kerberos disable telnet


set authentication enable kerberos disable http


set authentication login attempt 3 console


set authentication login attempt 3 telnet


set authentication login lockout 0

console

set authentication login lockout 0 telnet


set authentication enable attempt 3 console


set authentication enable attempt 3 telnet


set authentication enable lockout 0 console


set authentication enable lockout 0 telnet



#authorization


set authorization exec enable tacacs+ if-authenticated console


set authorization exec enable tacacs+ if-authenticated telnet


set authorization enable disable console


set authorization enable disable telnet


set authorization commands enable all tacacs+ if-authenticated console


set authorization commands enable all tacacs+ if-authenticated telnet


thnks

Actions

This Discussion