Console is authenticating to AAA but unable to enter enable mode

When i enter vty i can log in straight to priv leve 15-authenticating to tacacs-
howerver when i try through the conosle port, i get in via privliege level 1
howerver when i attemt to enable..i get asked for a password, and the enable password i have configured does not work
aaa authentication attempts login 2
aaa authentication login default group tacacs+ local enable
aaa authentication enable default group tacacs+ enable
aaa authorization config-commands
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ none
aaa accounting system default start-stop group tacacs+
line con 0
password 7 11ddddD
logging synchronous
line aux 0
line vty 0 4
privilege level 15
password 7 0605ddddddd41
logging synchronous
transport input telnet ssh
line vty 5 15
privilege level 15
password 7 06ddddd4F41
logging synchronous
transport input telnet ssh

It is not working because you have "aaa authentication enable default group tacacs+ enable".
If you are locked out I would suggest password recovery and using aaa authentication and authorization commands carefully. Here is a guide to help you http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_aaa_overview_external_docbase_0900e4b1805adb64_4container_external_docbase_0900e4b1807af93e.html
I hope it helps.
PK

Similar Messages

Unable to enter Recovery Mode for my iPad Air

Unable to enter Recovery Mode for my iPad Air
While updating my iPad Air to iOS 7.0.6, it went into an endless loop of cycling between the white Apple screen and the whirling dashes. I can't even reliably shut it down. It seems a prime candidate for recovery mode, but unfortunately I can't get it there. When I try to enter recovery mode by attaching to iTunes then pressing the home key and then reattaching theUSB cable when attached to iTunes, I just go back into the same endless loop Apple screen / whirling dashes cycle.
Right now I'm just waiting for it to power off by letting the battery run down, to see if that jumpstart brings it back up into a different state.
Anything else I can try? Or is my next stop the Genius Bar?
Thank you,
Matt

The timing on this has to be...just...right to enter DFU mode. If that won't work, plug the iPad Air into your computer and set the iPad into recovery mode, like so:
1) Turn off your device. If you can't turn it off, press and hold the Sleep/Wake and Home buttons at the same time and wait a few seconds for it to turn off.
2) Plug the device's USB cable into your computer only.
3) Hold down the device's Home button as you connect the USB cable to it.
4) When you see the Connect to iTunes screen, release the Home button. If you don't see this screen, try steps 1 through 3 one more time.

Unable to enter recovery mode

I'm using a rooted Xperia SL and I'm unable to enter recovery mode. I was running on Doomlord's pre rooted Stock JB ROM for Xperia S and Trinity ultimate Kernel. The problem started when I tried to flash Sound Enhancements and Walkman app from XDA forums.
After it flashed and I rebooted my device, my phone just kept restarting without being able to get to the homescreen. So I entered TWRP screen and I reflashed the JB ROM. Now, even though I flashed a recovery using Fastboot, I'm still unable to enter recovery mode
I tried using goo.manager but still no luck! The rom works fine and it's prerooted and I can use it to function normally, but I'm not able to enter recovery to flash other apps
Please help
Solved!
Go to Solution.

Make sure the recovery is compatible with the rom and kernel you have on your Xperia
Discussion guidelines.
Message me or any other moderator to seek help regarding moderation.

Unable to enter maintenance mode - dtrt1000

Over the last few weeks my box is almost useless. With frequency it only part records, freezes requiring rebooting, momintary screen blanks, and is generally a pain in the rear. I've tried to get into maintenance mode to try and reset it, but following the guide from Youview it doesn't work, and the box just starts as normal.
My understanding is that you (1) Switch the box off from the back (2) Switch it back on after 30secs (3) Press the power button and immediately hold of the -vol button until the splash screen appears...Then you can access the menu.
I've tried holding the holiding the -vol button before the power button, holding it immediately after power button, holding it until the nearly ready screen, in low and high eco modes etc but get the same result, it just goes straight into normal programes???

1 Start with the YouView box powered off from the switch on the REAR panel power button
2. Power back on the YouView box using the REAR panel power button
3. When the FRONT power button is illuminated with an orange circle, press the FRONT panel power button firmly once and it will turn blue
4. Immediately press and hold the "VOL-" button which can be found on the right of the FRONT panel the first silver button.
5. A message saying "Enter Maintenance Mode Y/N (Y: POWER)" appears on the TV screen
So if I understand correctly your experience is that steps 1, 2 & 3 occur but when doing step 4 the message step 5 (does not occur ) and your box boots as normal.
My own (historic ) experience is that the timing of stages 3 and 4 is quite tight - ie the power button turning blue followed immediately by the VOL- button being pressed and held.
Your options if the maintenence mode will not work are to contact BT support and seek their advice or if you are not concerned about the recordings remaining on the box you can do a factory reset from from main Youview menu
https://community.youview.com/youview/topics/top_tip_soft_reset_reboot_power_cycling_maintenance_mod...

HT201263 STILL unable to enter recovery mode

Tried using this technique but my iPod does not respond to Step 2a or 2b.

Try the remaining items of the follow. You will likely have to let the battery fully drain as below.:
- iOS: Not responding or does not turn on
- Also try DFU mode after try recovery mode
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
- If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
- If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
Apple Retail Store - Genius Bar

Unable to enter recovery mode on my Z3

I bought my xperia z3 a few months ago and I decided I want to root it. I got as far as unlocking the bootloader but now that I need to put it into recovery mode I found out I can't. I have tried multiple methods, the power off then power on while pressing the volume bottons and other variations of that. I also tried usind android-sdk the "adb reboot recovery", and it took awhile to figure that out and once i got it to work all it did was reboot the device. It did not go into reovery mode, I don't get an LED light when i power the phone on like most of the guides say I should be getting. I'm getting really frustrated, I've searched far and wide on the internet for a similar problem and all of the instances i have found have been on rooted phones so the fix is easy, this phone has never been rooted, only the bootloader has been unlocked. Any help at all would be greatly appreciated!

XDA Forum. @dbott

Unable to enter change mode transfer rule

Hi,
We are in the middle of our annual stackupgrade (from NW7.0 to NW7.01) and ran into a problem.
While testing I noticed that loading data from three old DSOs to their related infocubes does no longer work.
The error reported was that I needed to replicate the datasource and activate the transfer rules again. An error that occurred a lot during this stackupgrade with datasources from other systems.
Replication of the datasource went just fine, but so far it has not been possible to re-activate the matching tranfer rules.
I get the following error/message when trying to go into change mode of the transfer rule:
R3TR generated, changes possible
As a result the transferrule opens in display mode and it is not possible to change anything or re-activate the transfer rule.
An authorization issue seems unlikely, because I get the same error with sap all and my actions have been traced without issues.
Any suggestions?

Hi
Generally we do this using program
RS_TRANSTRU_ACTIVATE_ALL
Programe to activate Transfer Rules in BW
use program RSDS_DATASOURCE_ACTIVATE_ALL to activate the data sources
Regards,
Venkatesh

Unable to enter recovery mode after EMMA TA update flash

Hi, I instaled to a sony xperia Z ultra the TA upadate using EMMA tool. The bootloader is unlocked and no error after the flash. After all procedure, I can't enter in recovery mode. Anyone have this issue?

Hi Lusorg
Sorry for replying late.
Now that is really strange and I belive the fault lies within the EMMA.
How about trying it now again or after few days so that things get fixed ?
Try to flash the Generic firmware once again, first see if it still shows kitkat for you. It should be rather lollipop.
Also few things to take care of. Turn off antivirus and firewall on your computer before you begin flashing because these softwares really mess up with EMMA / PC Companion etc
EDIT : One more thing I'd like to add is make sure you're following the correct way to enter recovery.

User having all authentication but unable to login in planning why ?

user having all authentication but unable to login why in planning ?

You might need to give some more details.
For example, what kind of provisioning in shared services, under what groups if any, what kind of dimension level access in planning etc?

HT4623 I have updated my Iphone 3 but unable to start it. It takes too much time on Authentication and than message appears that Authentication failed

I have updated my Iphone 3 but unable to start it. It takes too much time on Authentication and than message appears that Authentication failed

I don't know either its jailbroken or hacked otherwise.
It was working properly before I have updated it through Itunes to update the OS. After the updation, this message occurs
Authentication failed, please try after few minutes
Please help

VPN connects but unable to access resources on remote network

HI,
I'm able to ping the ASA interface once the VPN is connected but unable to access any of the resources located on the remote network such as shares and computers. The cisco vpn client shows data being sent and recieved when I ping the interface on the ASA but it doesn't recieve any data when I attempt to ping or access other resources on the network.
ASA Version 8.2(5)
hostname HOST_NAME
domain-name default.domain.invalid
names
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
speed 10
duplex half
interface Ethernet0/4
speed 100
duplex full
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 10.10.8.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address 12.x.x.x x.x.x.x
boot system disk0:/asa825-k8.bin
ftp mode passive
dns domain-lookup inside
dns domain-lookup outside
dns server-group DefaultDNS
name-server 10.10.8.2
domain-name default.domain.invalid
same-security-traffic permit intra-interface
object-group service Vipre tcp
port-object range 18082 18082
port-object range 18086 18086
object-group network town
network-object 192.168.0.0 255.255.0.0
access-list outside_20_cryptomap extended permit ip 10.10.8.0 255.255.255.0 192.168.0.0 255.255.252.0
access-list new extended permit ip host 192.168.0.1 any
access-list new extended permit ip any host 192.168.0.1
access-list outside_20_cryptomap_1 extended permit ip 10.10.8.0 255.255.255.0 192.168.0.0 255.255.252.0
access-list townoffice_splitTunnelAcl standard permit 10.10.8.0 255.255.255.0
access-list townremote_splitTunnelAcl standard permit 10.10.8.0 255.255.255.0
access-list outside_access_in extended permit tcp any interface outside object-group Vipre
access-list outside_access_in extended permit tcp any object-group Vipre interface inside object-group Vipre
access-list outside_access_in extended permit tcp any eq 3389 10.10.8.0 255.255.255.0 eq 3389
access-list test extended permit ip host 192.168.0.6 host 10.10.8.155
access-list test extended permit ip host 10.10.8.155 host 192.168.0.6
access-list test extended permit ip host 10.10.8.2 host 192.168.3.116
access-list test extended permit ip host 192.168.3.116 host 10.10.8.2
access-list test extended permit ip host 10.10.8.155 host 192.168.3.116
access-list bypass extended permit ip host 10.10.8.155 host 192.168.3.116
access-list bypass extended permit tcp 192.168.0.0 255.255.0.0 10.10.8.0 255.255.255.0
access-list bypass extended permit tcp 10.10.8.0 255.255.255.0 192.168.0.0 255.255.0.0
pager lines 24
logging enable
logging buffered debugging
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool vpn 10.10.8.125-10.10.8.149 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-522.bin
no asdm history enable
arp timeout 14400
global (inside) 1 interface
global (outside) 1 interface
nat (inside) 1 192.168.0.0 255.255.0.0
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface 18082 10.10.8.2 18082 netmask 255.255.255.255
static (inside,outside) tcp interface 18086 10.10.8.2 18086 netmask 255.255.255.255
static (inside,outside) tcp interface 3389 10.10.8.2 3389 netmask 255.255.255.255
static (inside,inside) 192.168.0.0 192.168.0.0 netmask 255.255.0.0
static (inside,inside) 10.10.8.0 10.10.8.0 netmask 255.255.255.0
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 12.70.119.65 1
route inside 192.168.0.0 255.255.0.0 10.10.8.250 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
aaa authentication telnet console LOCAL
http server enable
http outside
http outside
http inside
http outside
http inside
http outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
sysopt noproxyarp inside
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 40 set pfs
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 60 set pfs
crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 80 set pfs
crypto dynamic-map outside_dyn_map 80 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 100 set pfs
crypto dynamic-map outside_dyn_map 100 set transform-set ESP-3DES-SHA
crypto map outside_map 20 match address outside_20_cryptomap_1
crypto map outside_map 20 set pfs
crypto map outside_map 20 set peer 69.87.150.118
crypto map outside_map 20 set transform-set ESP-3DES-SHA ESP-3DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp nat-traversal 30
telnet 10.10.8.0 255.255.255.0 inside
telnet timeout 5
ssh 63.161.207.0 255.255.255.0 outside
ssh timeout 5
console timeout 0
dhcpd dns 10.8.8.2
dhcpd address 10.10.8.150-10.10.8.200 inside
dhcpd dns 10.10.8.2 interface inside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy aaa internal
group-policy aaa attributes
dns-server value 10.10.8.2 4.2.2.2
vpn-tunnel-protocol IPSec
default-domain value domainname
group-policy bbb internal
group-policy bbb attributes
wins-server value 10.10.8.2
dns-server value 10.10.8.2
vpn-tunnel-protocol IPSec l2tp-ipsec
split-tunnel-policy tunnelall
split-tunnel-network-list value townoffice_splitTunnelAcl
default-domain value domainname.local
group-policy townremote internal
group-policy townremote attributes
wins-server value 10.10.8.2
dns-server value 10.10.8.2 4.2.2.2
vpn-tunnel-protocol IPSec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value townremote_splitTunnelAcl
default-domain value domainanme
group-policy remote internal
group-policy remote attributes
wins-server value 10.10.8.2
dns-server value 10.10.8.2
vpn-tunnel-protocol IPSec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value townremote_splitTunnelAcl
default-domain value dksecurity.local
address-pools value vpn
username xxxx password . encrypted privilege 15
username xxxx attributes
vpn-group-policy dksecurityremote
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy dksecurityremote
username xxxx password . encrypted privilege 15
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy dksecurityremote
username xxx password encrypted privilege 15
username xxxx attributes
vpn-group-policy dksecurityremote
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy dksecurityremote
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy dksecurityremote
username xxx password encrypted privilege 15
username xxx password encrypted privilege 15
username xxxx attributes
vpn-group-policy remote
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy remote
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy remote
username xxxx password encrypted privilege 15
username xxx password encrypted privilege 15
username xxx attributes
vpn-group-policy remote
tunnel-group 69.87.150.118 type ipsec-l2l
tunnel-group 69.87.150.118 ipsec-attributes
pre-shared-key *****
tunnel-group remote type remote-access
tunnel-group remote general-attributes
address-pool vpn
default-group-policy townremote
tunnel-group townremote ipsec-attributes
pre-shared-key *****
isakmp keepalive disable
tunnel-group townremote type remote-access
tunnel-group townremote general-attributes
address-pool vpn
default-group-policy townremote
tunnel-group lansingremote ipsec-attributes
pre-shared-key *****
class-map tcp-bypass
match access-list bypass
class-map test
match access-list new
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
no dns-guard
no protocol-enforcement
no nat-rewrite
policy-map global_policy
class test
class inspection_default
policy-map tcp
class tcp-bypass
set connection random-sequence-number disable
set connection advanced-options tcp-state-bypass
service-policy global_policy global
service-policy tcp interface inside
prompt hostname context
call-home reporting anonymous prompt 2
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:c724d6744097760d94a7dcc79c39568a
: end

You need to change the VPN pool ip subnet to something other than the same ip range used on the inside interface.
Sent from Cisco Technical Support iPad App

TS1398 Can't connect to hotspot with my iPad, picks it up but unable to connect. Any sugestions?

Can't connect to hotspot with my iPad, picks it up but unable to connect. Any sugestions?

When Access Connections fails to connect it asks if I want to configure the network and there's a bunch of settings. Connection type: infrastructure or Adhoc, Wireless security type "use static WEP keys", "Use Wi-Fi protected Access - Pre Shared Key (WPA-PSK)" - I choose it and under Properties there's more options. Access point authentication, WPA-PSK or WPA2-PSK; I've tried it both ways. Data encryption: TKIP or AES, I've been using TKIP. Under Pre-Shared Key, there's the only box I see to enter a password, so I enter the password there.
Chances are pretty good that the problem is the network configuration of your PC and not the AirPort Extreme Base Station (AEBS). What configuration options you choose will depend on how you set up the AEBS's wireless network, but the following can be used as a guideline:
o Connection Type: Infrastructure
o Wireless Security Type:
AirPort Setting = PC Setting
o WEP = WEP
o WPA Personal = WPA-PSK w/TKIP
o WPA2 Personal = WPA-PSK w/AES

E62 though connected but unable to get browsing

I got Nokia E62.
I have connected this phone through USB Cable with Modem.
All got successfully done and connected but unable to browse on phone.
Is there any setting to be done on phone to get start browsing?
Can anyone try to send suggetion?
Attachments:
E62-3.JPG ‏99 KB
E62-1.jpg ‏147 KB

Hi there.
Some hotel networks require some sort of authentication, or sometimes even payment to connect to the network. If you are connected to the wireless network, and the network requires this, you should be greeted with a page as every time that you attempt to connect to a wireless network, the iPad checks for this.
I would also try contacting the hotel's network troubleshooting department for help also, as they may have a different configuration than normal networks do.
Hope this helps.

HT1277 i can receive mail but unable to send mail

i can receive mail but unable to send mail

I'm yet another person who upgraded to Maverick OSX. I'm now thinking, "BIG mistake". Mail was working perfectly. Then, last night, Mail stopped sending.
I've checked everything. Comcast servers are set up correctly. Mail works fine on my ipad, but will not send. It gives me a SMPT error of "Cannot send message using the server comcast.net--authentication rejected" Comcast.net (Offline). I can not get it back online. I've also tried the fixes here, but there is no info.plist by those names in my library!
Anyone have any other ideas how to get this working again? Apple's OS's have been pretty decently stable in the past. I had no thought that the upgrade would be so problematic. Live and Learn.
Thanks for any suggestions.
-Rachel

I do not have the 'Advanced' tab on the menu bar. I am trying to change ringtone on my iphone 4s. Have done the following: Right cick on song, entered the start and stop times, but unable to proceed as need 'Advanced' tab in order to change to option.

I do not have the 'Advanced' tab on the menu bar. I am trying to change ringtone on my iphone 4s. Have done the following: Right cick on song, entered the start and stop times, but unable to proceed as need 'Advanced' tab in order to change to option.

You don't need to upgrade your software. But if you're struggling with Spry, IMO you should cut your losses and switch to something better for the longrun.
If you have a budget to work with, I highly recommend Project Seven's Pop-Menu Magic 3. It's easy to use in DW CS4, 5, 6 or CC. More importantly, it's bullet proof and works in all devices.
Pop-Menu Magic3 by PVII (commercial DW extension)
http://www.projectseven.com/products/menusystems/pmm3/index.htm
If you don't have a budget to work with, you can roll your own menus with jQuery plugins. A bit more effort on your part, but they perform better than Spry.
jQuery Superfish
http://users.tpg.com.au/j_birch/plugins/superfish/
jQuery MegaMenu2
DEMO:
http://www.geektantra.com/projects/jquery-megamenu-2/
DOWNLOAD:
http://code.google.com/p/jquery-megamenu/
Nancy O.

Console is authenticating to AAA but unable to enter enable mode

Similar Messages

Maybe you are looking for