add pasword to access config mode

Unanswered Question
jasonrandolph Tue, 06/12/2007 - 12:58

So you want them to enter the same password 3 times to get config mode, or are you wanting them to have 3 tries maximum?

What are you using for authentication on the device? TACACS? RADIUS? The router itself?

You can create initial logins with an access level of 1, which requires them to enable themselves and type in the enable password to proceed to more advanced commands.

I want them to have 3 tries max,if they fail, then they are out. I am using TACACS. But there are nothing there for config mode password. I know all about enable secert etc. This is not what I am looking for. I am looking to have the router prompt anybody for a passowrd to be in conf t mode.



router# conf t


How or what to config to do that.

That's what I am trying to add.

Richard Burts Tue, 06/12/2007 - 18:23


Unfortunately I do not believe that there is anything in IOS that will prompt for a separate password before entering configuration mode.



jasonrandolph Wed, 06/13/2007 - 07:52

I am not aware of any way to accomplish this.

You can force them to log in in non-enable mode, you can force them to have different passwords for enable/non enable mode, but I've never seen a way to force authentication for config mode only.


This Discussion