05-29-2009 03:13 PM - edited 03-06-2019 06:00 AM
On my 3750 switch, I create:
#username local secret cisco
#line console 0
password ciscoline
login tacacs
Then I telnet into the switch (via a terminal server).
I get prompt:
Username:
I type "local".
I do not even have a chance to type the password, and then I get:
Username:local
Password:
% Login invalid
Anyone has seen this before?
My intention is that if there is no tacacs system configured, then I would automatically authenticate using the 'local' user and password 'cisco'.
Solved! Go to Solution.
05-29-2009 03:55 PM
If that's your intention, you should use aaa new-model instead.
For instance:
aaa new-model
aaa authentication login default group tacacs+ local
The 'login tacacs' procedure you have, does not have the failover mechanism provided on aaa new-model.
HTH,
__
Edison.
05-29-2009 03:55 PM
If that's your intention, you should use aaa new-model instead.
For instance:
aaa new-model
aaa authentication login default group tacacs+ local
The 'login tacacs' procedure you have, does not have the failover mechanism provided on aaa new-model.
HTH,
__
Edison.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: