Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Bypass AAA for banner config

Hi All,

I'm trying to quickly configure a MOTD banner on one of our router but it's giving me the AAA error that I'm not authorized to issue the command.

Can I bypass it by configuring the line vty with privilege level 15 or negate AAA authorizationline and put it back again?

I would appreciate someone's advise. TIA!

Sent from Cisco Technical Support iPhone App

2 REPLIES
Bronze

Re: Bypass AAA for banner config

IT dependance on what commando's you are alowed to enter at this time by the AAA server.
If you have any possibility to switch to local athorization then you may succeed.
You may also make the aaa server unreachable (pull cable) after Some time-out the switch may fall back to local auth.

Sent from Cisco Technical Support iPad App

Re: Bypass AAA for banner config

hi,

i don't see any fall back to local for authorization.

it's strange i could see the banner login/motd that i ran but not the ASCII text.

banner login ^C

banner motd ^C

it's not posible to disconnect the AAA server since other device's in the production network would be depending on it.

here's the relevant AAA config.

aaa group server tacacs+ ACS_Group

server 66.x.x.x

server 66.x.x.x

!

aaa authentication login default group ACS_Group line

aaa authentication enable default group ACS_Group enable

aaa authorization console

aaa authorization config-commands

aaa authorization exec default group ACS_Group local if-authenticated

aaa authorization commands 0 default group ACS_Group if-authenticated

aaa authorization commands 1 default group ACS_Group if-authenticated

aaa authorization commands 15 default group ACS_Group if-authenticated

aaa accounting exec default

action-type start-stop

group ACS_Group

!

aaa accounting commands 1 default

action-type start-stop

group ACS_Group

!        

aaa accounting commands 15 default

action-type start-stop

group ACS_Group

463
Views
4
Helpful
2
Replies
CreatePlease to create content