Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Locked out of my router after messing with aaa.

I am new to aaa and was starting to configure it on my router. I did wri mem and left for the day. When I try to telent or console to my router today it is asking for username/password and of course authetication is failing. How can I get into this router ? this is what I added:

aaa new-model

aaa authentication login default radius local

aaa authentication login no_radius enable

aaa authentication ppp default if-needed radius

aaa authorization network radius

  • AAA Identity and NAC
4 REPLIES
Cisco Employee

Re: Locked out of my router after messing with aaa.

Not sure what you have configured under the console or line vty but according to the login config, router will try to contact to radius server, if radius server is dead, it will try to look in the local database.

So if the radius server will not respond, you should be able to get in with local username and password.

If no luck, you need to do the password recovery for that router. Here is the link which will help you for password recovery to get in again.

http://www.cisco.com/warp/public/474/

Pick your router on that link.

Cisco Employee

Re: Locked out of my router after messing with aaa.

Hi,

Try to shut down the services of your radius server, this will force the router to fall back to the local database. Now if you have a local user/password configured, you should be able to login using that username. If you did not setup any local username password, then password recovery is pretty much the only option.

Thanks,

Obaid.

New Member

Re: Locked out of my router after messing with aaa.

I ended up having to remove the aaa authentication login no_radius enable statement under aaa config and vty line conf as well to be able to log in successfully. Perhaps not the best way around it, but you'll find it works.

As well, BTW, I was able to get in to the Router by a console login rather than a full password recovery.

New Member

Re: Locked out of my router after messing with aaa.

I went to rommon and took out aaa config.

Thanks for your input,

Todd.

199
Views
0
Helpful
4
Replies