All Questions
9 questions
2
votes
0
answers
672
views
Cisco Access Switches: Monitoring AAA server dead via SNMP?
This is a new setup of Cisco access switches (2960S, 2960X IOS with 15.2(2)E9, but mostly C1000 with IOS 15.2(7)E*), with a Cisco ISE 3.0 as authentication server for 802.1X, config style is to be ...
- 8,876
2
votes
1
answer
395
views
AAA Authorization on IOS
Still working away on a project (not for real life deployment so don't worry about seeing passwords).
I have a Tacacs server set up for centralised AAA. I am trying to set up two users, "admin&...
- 171
1
vote
1
answer
198
views
Where did `private_sg-0` come from?
I'm configuring my first Cisco product (WS-C3560CX-12TC-S) and trying to get to grips with aaa. I'm used to *nix where the first thing you do with headless devices is enable and configure SSH access ...
- 125
1
vote
1
answer
2k
views
Lockout of console! Help required!
I'm locked out of the console after applying two AAA authorization statements
aaa new-model
aaa authorization console
aaa authorization exec default group tacacs+ none
Now my customer requires me ...
- 13
-2
votes
1
answer
243
views
What does aaa mean?
In the below configuration, what does aaa mean?
aaa authentication login CON local
aaa authentication login VTY group VTY local
aaa authentication dot1x default group DOT1x
aaa authorization exec ...
4
votes
1
answer
215
views
Default authentication/authorization/accounting list on all lines?
Am I correct that if one has not specified a named authentication list(login authentication ... under line configuration), authorization list(authorization .. under line configuration) or accounting ...
- 1,121
6
votes
1
answer
4k
views
How to view default authentication method for different lines(cty, vty, aux, tty) in IOS?
For example if I enable AAA(aaa new-model) in IOS router with default configuration and try to log in over console line(cty), then there is no authentication. However, if I try to log in over telnet(...
- 1,121
6
votes
2
answers
27k
views
What are the different modes in Cisco routers, and why these modes?
I want to know on what basis Cisco designed the different modes in their routers.
For example:
config mode
execution mode
Can any one give the perfect reasons behind the different modes?
What ...
- 1,621
9
votes
3
answers
27k
views
AAA/TACACS+ password on Cisco switch always fails at second password prompt
Whenever logging into a network device using AAA/TACACS+, if I fat-finger the password prompt after the username prompt, the second password prompt always fails even when the password is correct. I ...
- 7,134