Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started.

Gold

Login from console directly to enable

Hello

I need login to router via console directly to enable mode using local authentication

with commands

aaa new model

username test privilege 15 password test

aaa authentication login console local

line con 0

login authentication console

Iam NOT in enable mode , what Iam missing

THX

M.

  • Other Network Infrastructure Subjects
2 REPLIES
Bronze

Re: Login from console directly to enable

replace the login auth console to be login local mate that will do the trick

Hall of Fame Super Silver

Re: Login from console directly to enable

With aaa new-model in the config I think Milan will find that login local is no longer accepted. If he wants to remove aaa new-model this should work, but I suspect that he wants to keep the aaa processing.

The essential part of this issue is that Cisco by default does aaa authorization processing on the vty ports and does not do it on the console. (This is to help keep people from locking themselves out of the router is they have mis-configured authorization processing.) It is the authorization processing that puts users directly into privilege mode.

If Milan is comfortable that his configuration of authorization is good and if he will add this line to the configuration I think he will achieve what he is trying to do:

aaa authorization console

HTH

Rick

1134
Views
0
Helpful
2
Replies