Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

tacacs problem

Hi, I have a problem with switch 2948 CatOS 6.x, i can?t enter to the device, the firts I was blocking in the router the address of tacacs server and then i used a local user but it doesn?t work.

Username: tcom

Enter PASSCODE:

% Authentication failed.

Username: me167185

Authentication function reports error condition

So the only form to enter the switch is using Solar Winds with the snmp comunnity, I put the configuration on a txt file.

Could you help me, with two things, first what was wrong in the configuration and second who can I disable all authentification , and only use a normal password to enter to the device

thanks

Manuel

1 REPLY
New Member

Re: tacacs problem

I forget the configuration

#tacacs+

set tacacs server 165.197.192.173

set tacacs server 165.197.85.14 primary

set tacacs attempts 3

set tacacs directedrequest disable

set tacacs key PMSC/IT.2005

set tacacs timeout 5

#authentication

set authentication login tacacs disable console

set authentication login tacacs enable telnet primary

set authentication login tacacs disable http

set authentication enable tacacs disable console

set authentication enable tacacs enable telnet primary

set authentication enable tacacs disable http

set authentication login radius disable console

set authentication login radius disable telnet

set authentication login radius disable http

set authentication enable radius disable console

set authentication enable radius disable telnet

set authentication enable radius disable http

set authentication login local enable console

set authentication login local enable telnet

set authentication login local enable http

set authentication enable local enable console

set authentication enable local enable telnet

set authentication enable local enable http

set authentication login kerberos disable console

set authentication login kerberos disable telnet

set authentication login kerberos disable http

set authentication enable kerberos disable console

set authentication enable kerberos disable telnet

set authentication enable kerberos disable http

set authentication login attempt 3 console

set authentication login attempt 3 telnet

set authentication login lockout 0

console

set authentication login lockout 0 telnet

set authentication enable attempt 3 console

set authentication enable attempt 3 telnet

set authentication enable lockout 0 console

set authentication enable lockout 0 telnet

#authorization

set authorization exec enable tacacs+ if-authenticated console

set authorization exec enable tacacs+ if-authenticated telnet

set authorization enable disable console

set authorization enable disable telnet

set authorization commands enable all tacacs+ if-authenticated console

set authorization commands enable all tacacs+ if-authenticated telnet

thnks

529
Views
0
Helpful
1
Replies