03-04-2009 12:08 PM - edited 03-10-2019 04:22 PM
I have a C6509 with sup32 IOS based switch. I equally have tacacs authentication enables on the switch. But each time I telnet to the switch is brings the following:
Username: XXXXXXXX
Password: XXXXXXXX
Prompt>enable
User Access Verification
Username: XXXXXXXX
Password: XXXXXXXX
I do NOT like to have the second username. I expect after the enable command, I should just have be asked to key in my password and not asking me for a username again.
Here is the version of IOS of the switch:
s3223-adventerprisek9_wan-mz.122-33.SXH3a.bin
Here is the aaa config:
aaa new-model
aaa authentication login default group tacacs+ line enable
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
regards,
Enrico
Solved! Go to Solution.
03-04-2009 08:44 PM
you may be running into bug CSCsu21040. This is corrected in SXH4.
03-04-2009 08:44 PM
you may be running into bug CSCsu21040. This is corrected in SXH4.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: