cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3073
Views
0
Helpful
2
Replies

Login from console directly to enable

m.sir
Level 7
Level 7

Hello

I need login to router via console directly to enable mode using local authentication

with commands

aaa new model

username test privilege 15 password test

aaa authentication login console local

line con 0

login authentication console

Iam NOT in enable mode , what Iam missing

THX

M.

2 Replies 2

romccallum
Level 4
Level 4

replace the login auth console to be login local mate that will do the trick

With aaa new-model in the config I think Milan will find that login local is no longer accepted. If he wants to remove aaa new-model this should work, but I suspect that he wants to keep the aaa processing.

The essential part of this issue is that Cisco by default does aaa authorization processing on the vty ports and does not do it on the console. (This is to help keep people from locking themselves out of the router is they have mis-configured authorization processing.) It is the authorization processing that puts users directly into privilege mode.

If Milan is comfortable that his configuration of authorization is good and if he will add this line to the configuration I think he will achieve what he is trying to do:

aaa authorization console

HTH

Rick

HTH

Rick
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: