Line Console Login

Hello Everyone,
Since i've configured ssh on my vpn router IOS won't let me add the "login" command on line console 0. I know it's an aaa issue but im not that familar with aaa. How can i restore the login feature in line console with aaa new-model enable?
Configs:
Building configuration...
Current configuration : 5741 bytes
version 12.4
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
no service password-encryption
hostname my_vpn
boot-start-marker
boot system flash c870-advipservicesk9-mz.124-4.T8.bin
boot-end-marker
logging buffered 8196 debugging
enable password 1234
aaa new-model
aaa session-id common
resource policy
clock timezone EST -5
clock summer-time EDT recurring
ip subnet-zero
ip cef
no ip domain lookup
ip domain name mydomain.com
username cisco password 0 cisco
snip
line con 0
password cisco
no modem enable
line aux 0
line vty 0 4
password abcd
transport input telnet ssh
Thanks

Guys,
I found this site lastnight and is actually just what you guys suggested.
http://www.freeccnaworkbook.com/labs/section-3-configuring-basic-cisco-device-security/lab-3-3-configuring-aaa-authentication-lists/
Rick,
I used aaa new-model because i use ssh with rsa to remotely login into the router.
Configs:
Building configuration...
Current configuration : 5741 bytes
version 12.4
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
no service password-encryption
hostname my_vpn
boot-start-marker
boot system flash c870-advipservicesk9-mz.124-4.T8.bin
boot-end-marker
logging buffered 8196 debugging
enable password 1234
aaa new-model
aaa authentication login console_authentication local
aaa authorization console
aaa session-id common
resource policy
clock timezone EST -5
clock summer-time EDT recurring
ip subnet-zero
ip cef
no ip domain lookup
ip domain name mydomain.com
username cisco privilege 15 password cisco
snip
line con 0
password cisco
login authentication console_authentication
no modem enable
line aux 0
line vty 0 4
password abcd
transport input telnet ssh
Thanks
Cyril

Similar Messages

  • How to hide line console parameters through Cisco ACS

    Hi,
    Can any one of you please help me in the following scenario ?
    I want to hide the line console, line aux and line vty configuration parameters of the cisco devices based on user level privillages through Cisco ACS. For example, if a user logs into the devices with privilege level 7, then he should not be able to see the line paramenters on the cisco devices for which he had privilege level 7 access.
    Can you please help me out how to achieve this?? Your help in this regard is highly appriciated.
    Thanks

    This thing is possible with local authorization on IOS device. With ACS this is not possible.
    In acs you can set what all commands a specific user can issue. That feature is called command authorization.
    For show run you need to give priv 15. ACS works in a different way if you compare it with setting up local priv lvls on router/switch.
    Best way to set it up is to give all user priv lvl 15 and then define what all commands user can execute.
    Note : Having priv 15 does not mean that user will able to issue all commands.
    We will set up command authorization on acs to have control on users.
    This is how your config should look,
    aaa authentication login default group tacacs+ local
    aaa authorization exec default group tacacs+ if-authenticated
    aaa authorization commands 1 default group tacacs+ if-authenticated
    aaa authorization commands 15 default group tacacs+ if-authenticated
    aaa authorization config-commands
    aaa accounting commands 1 default start-stop group tacacs+
    aaa accounting commands 15 default start-stop group tacacs+
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml
    Regards,
    ~JG
    Do rate helpful posts

  • Hossein console login : root

    Hi.
    As you can see in the subject line above this message ,I faced to this step of the first booting of Solaris 10 .
    The hostname was hossein & after coming of hossein console login ,I typed root. It then went to the #
    I do not know what to do here .
    How can I get through this as well?
    Or # is a wrong way to the Solaris desktop?
    Any command I have to type to pass it or what ..?
    (Oh.By the way, when I write something else the password : comes to the screen .I had not typed root password in the installation process.)
    Best Regards

    Hi.
    As you can see in the subject line above this message
    ,I faced to this step of the first booting of Solaris
    10 .
    The hostname was hossein & after coming of hossein
    console login ,I typed root. It then went to the #
    I do not know what to do here .
    How can I get through this as well?
    Or # is a wrong way to the Solaris desktop?
    Any command I have to type to pass it or what ..?
    (Oh.By the way, when I write something else the
    password : comes to the screen .I had not typed root
    password in the installation process.)
    Best RegardsI had this trouble. I reinstalled the Solaris complete distribution rather than the core system.

  • Tacacs Fallback and console login

    Hello,
    I am trying to create a tacacs config that will make sure that when you log onto the console you do not get tacacs and that we are on line login and local enable. If connectivity to the tacacs server is lost, the login for telnet defaults to the line password and uses the local enable password.
    My config:
    aaa authentication login default group tacacs+ line
    aaa authentication login CONSOLE line
    aaa authentication enable default group tacacs+ enable
    aaa authorization exec default group tacacs+ if-authenticated
    aaa authorization exec CONSOLE none
    aaa authorization commands 1 default if-authenticated
    aaa authorization commands 15 default if-authenticated
    aaa authorization commands 1 CONSOLE none
    aaa authorization commands 15 CONSOLE none
    aaa accounting exec default start-stop group tacacs+
    aaa accounting commands 1 default start-stop group tacacs+
    aaa accounting commands 15 default start-stop group tacacs+
    aaa accounting connection default start-stop group tacacs+
    aaa accounting system default start-stop group tacacs+
    line con 0
    password xxxxx
    authorization exec CONSOLE
    login authentication CONSOLE
    end
    Thanks
    msteinhoff

    This is exactly what you need:
    aaa authentication login notac none
    aaa authentication login VTY group tacacs+ local
    aaa authentication enable default group tacacs+ enable
    aaa authorization console
    aaa authorization config-commands
    aaa authorization exec default group tacacs+ group tacacs+
    aaa authorization exec notac none
    aaa authorization exec VTY group tacacs+ if-authenticated none
    aaa authorization commands 0 VTY group tacacs+ if-authenticated none
    aaa authorization commands 1 VTY group tacacs+ if-authenticated none
    aaa authorization commands 15 VTY group tacacs+ if-authenticated none
    aaa authorization network VTY group tacacs+ if-authenticated none
    aaa accounting exec TAC start-stop group tacacs+
    aaa accounting exec VTY start-stop group tacacs+
    aaa accounting commands 0 TAC start-stop group tacacs+
    aaa accounting commands 0 VTY start-stop group tacacs+
    aaa accounting commands 1 TAC start-stop group tacacs+
    aaa accounting commands 1 VTY start-stop group tacacs+
    aaa accounting commands 10 TAC start-stop group tacacs+
    aaa accounting commands 15 TAC start-stop group tacacs+
    aaa accounting commands 15 VTY start-stop group tacacs+
    aaa accounting network VTY start-stop group tacacs+
    aaa accounting connection TAC start-stop group tacacs+
    line con 0
    exec-timeout 0 0
    authorization exec notac
    accounting commands 0 VTY
    accounting commands 1 VTY
    accounting commands 15 VTY
    accounting exec VTY
    logging synchronous
    login authentication notac
    line vty 0 15
    exec-timeout 0 0
    authorization commands 0 VTY
    authorization commands 1 VTY
    authorization commands 15 VTY
    authorization exec VTY
    accounting commands 0 VTY
    accounting commands 1 VTY
    accounting commands 15 VTY
    accounting exec VTY
    login authentication VTY
    transport input ssh
    This will give very fine control on what user(s) can and can not do. I use this configuration with Freeware TACACS and it
    works wonder for me.
    Good luck.
    David
    CCIE Security

  • My kids pushed something and this message comes up on a black screen: Darwin/BSD (new-host-4.home)(console) Login:  What do I do to fix it?

    My kids pushed something and this message comes up on a black screen: Darwin/BSD (new-host-4.home)(console) Login:  What do I do to fix it?

    Maybe I've spoken to quickly, see this thread https://discussions.apple.com/thread/320663?tstart=0

  • Command line console, any decent package?

    Hello there:
    I was given an assignment to write a simple adventure game, command line console is to be used to accept user instructions. While we can create a traditional while-loop to take users' requests, i am wondering if there is any decent package to handle commands from a console in a general way? It'd be a great time-saver in one's repository. :-)
    Thanks,
    Sway

    No packages that I know of, but take a look at the Scanner Class. Last time I did a Zork type of game it took like 2 hours to code up--with monster definitions, potions, and healing. You'll not get much more easy of an assignment for than a text based game.

  • Bypassing startup script in .cshrc.user file for console login

    Hi,
    I'm calling a startup script in my .cshrc.user file. How do I bypass the startup script if it is a console login. Other cases like telnet, rlogin or opening a new terminal should go through the startup script.
    Thanks,
    Ramkumar

    Short note; instead of ..
    echo `tty` >> testfile
    you could just do..
    tty >> testfile
    .. since the "tty" command sends its output to STDOUT, same as "echo", and >> takes the STDOUT and puts it in a file.
    Anyway, what does "tty" give you if you run it on the console?
    //Magnus

  • Virtual Command Line Console

    If you ever need to open an SR for an issue with a snapshotted application, or simply want to do some basic testing prior to building a virtual application that requires snapshotting, a virtual command line console is an excellent tool:
    1. Open ZAV studio
    2. Start a new project
    3. Point the startup file to C:\WINDOWS\system32\cmd.exe
    4. Point the output file to any location you wish
    5. Build
    To test:
    1. Run the virtual CMD.exe
    2. Navigate to the location of the installed exe you want to virtualize and run it
    The purpose of this test is simple: as we have not modified the configuration at all and have included no virtual file system or registry, this virtual CMD is running inside the xVM and using the file system/registry of the OS. This strips away all of the packaging elements that go into the snapshot process, allowing the cleanest possible test.
    If the installed application runs under these conditions, but fails to operate correctly when built into a virtual application, there is something going wrong in the packaging process. This could be a file being left out of the virtual file system, or a setting that needs to be in place, etc. If the installed application fails to operate correctly using the virtual CMD, however, there is a more serious issue; an SR should absolutely be opened if possible, so the support team can assist.

    this is an xwindows error meaning you haven't setup xwindows properly in the context where you're running the program - is it in a unix shell ? Do you have an XServer running ?

  • How to Access Weblogic's Console Login? ( /console/LoginForm.jsp)

    Hi all,
    I am working with Weblogic Server 8.1. I would like to take weblogic's current
    administration console and make some modifications. Mostly, I would like to access
    LoginForm.jsp. Where exactly is this file located? I can find the console.war
    file, but the LoginForm.jsp is not there. I can't find the files I need to modify.
    Where can I find files to modify the administration console/login?
    You help is appreciated, thanks!

    Hi KirandeepKaur
    I have integrated the AD successfully and I can see all the AD users from my admin console (Weblogic).
    We are using IPM (Webcenter content imaging) as our front end system and now i can't log in to the ipm system with previous admin login.
    I can log in to other urls without any issue. (Em, console, cs)
    what will be the problem ??
    And how can i add ipm groups to the AD users ????
    Thanks,
    Nir

  • How to start graphical desktop GUI from solaris console login?

    I installed successfully Solaris 11 Express.
    However after Restart only the solaris console login prompt appears.
    How can I manually start the graphical desktop GUI from console login?
    How can I start always automatically the graphical desktop GUI from console login?
    Peter

    When you install Solaris 11 Express from the LiveCD on a system which supports the graphical login screen, it usually comes up automatically. So first, we need to know why this didin't happen. First, did you use Automated Install? If so, you may not have all of the software you need. If that is the case, you may need to do a "pkg install slim_install" as root to get the software you need. If you have all of the software you need, check "svcs -xv" to make sure that there were no problems in the system start up. If problems are listed, you should resolve those issues and see if that allows the graphic install to come up. If "svcs -xv" is clean, you should check the "gdm" service. If it is disabled, you need to enable it. I'm sure there are other potential problems but this should get you started.

  • T5120 console login failed

    Hi ,
    Need help on this .
    I have a T5120 unable to perform console login to domain through SP/ILOM .
    I have try to reset SP but unsuccessful . Managed to reboot the SP with sunservice
    id but still failed to get console login. The following error was seen while booting
    up the SP
    Waiting for daemons to initialize...
    Timed out waiting for daemons to start
    vbsc daemon failed to start
    T5120 current FW is
    current System Firmware
    Sun System Firmware 7.1.6.j 2008/11/25 11:12
    Host flash versions:
    Hypervisor 1.6.7.a 2008/08/30 05:18
    OBP 4.29.0.a 2008/09/15 12:01
    POST 4.29.0.a 2008/09/15 12:27
    SP firmware VBSC version: VBSC 1.6.7.c
    What is the cause of daemons failure ?
    Will upgrading the FW to the latest release ie patchid 136932-10 help ?
    TIA
    chong

    Hi ,
    More info .....
    LDOM is not being configured on the server .
    It seem that the ILOM has failed to communicate with the host as the result of the virtual blade system controller
    daemon failure .
    -> set /SYS/LOCATE value=Fast_Blink
    set: Invalid target /SYS/LOCATE
    How can I manaully restart the vbsc daemon ?

  • Console-login - vt(7i) options

    Hello everyone,
    I would like to know how to change console-login from 1024x768 to 1280x1024.
    Man vt(7i) docs.oracle.com/cd/E23824_01/html/821-1475/vt-7i.html  doesn't provide any options. Is it all down to GRUB?
    Thank you for time and advice
    -Dan

    I have a similar problem. I have the service running and repository created under the user of OMS, password = OMS. I can login to the schema with these credentials with sqlplus.
    Now when running DBA Studio with OMS, I give the same credentials for the OMS Admin Id and password along with the Management Server Name.
    It tells me the "credentials" are wrong. Saving and un-saving the id/password updates the omsconfig.properties file, but not sure that really matters.
    Any thoughts? I have a posting out there already "Fresh 8.1.6 install....OSM" ......should OMS!
    I'd REALLY appreciate your help,
    Scott

  • Console login and password

    after installing my new solaris 10 x86 platform, the system asks for a console login and password when I have not set any.thus it makes it difficult to boot

    Hello Michael,
    the username is <b>root</b> and the password is the one <b>you</b> assigned during installation.
    If you can't remember what you assigned, boot from cdrom into single-user mode, mount the / slice and clear the password entry in /etc/shadow.
    Maybe you assigned no password at all. Just press enter.
    To use SMC (Sun Management Console) a password is required ! Assign a new one with the <b>passwd</b> command.
    Michael

  • Console login...!

    I need to login in a non-graphical mode.... i.e. a console login. How can i do that....?

    Disable the GUI altogether if possible.
    Run /usr/dt/bin/dtconfig disable.
    Evil GUI... evil... ;-)

  • Svc:/system/console-login:default failed repeatedly

    I am in desperate need of help. I installed some patches from Sun Update Manager and rebooted as instructed. My system comes up but when I tried to login through the console, the login prompt keeps coming back, thus no users can log into the system. I even tried to ssh into the system and when I enter my username and password, I get a blank screen and cannot do anything.
    I use a laptop to access the system through a hyperterminal serial port and when I navigate through directories as root, I cannot run ls commands or more on files. I do see an error message using the ls command:
    ld.so.1:ls: fatal: libsec.so.1: version 'SUNW_1.2' not found (required by file /usr/bin/ls)
    open failed: No such file or directory
    Killed
    When I use the svcs command, I see that the svc:/system/console-login:default is on maintainance. I disabled it and tried to enable it again, but the service stays offline. I tried all kinds of svcadm commands to get the service running, but nothing works.
    I also tried killin the sulogin so that the sulogin service becomes disabled and enable system/console-login, but that didnt work either.
    I tried using the svccfg steps, nadda. Can someone help? Thanks.

    who -r
    run-level Sep 11 15:58 last=
    uptime
    11:01am up 98 days 20:02, 2 users, load average: 1.02, 1.02, 1.04
    Actually all services are running like nis and nfs properly and all can login using ssh remotely, system is not rebooted that I am seeing this maintenance root password message,
    when I killed sulogin process , then console-login seemed to go online but then again went to maintenance mode..

Maybe you are looking for

  • How to resolve a Kernal Panic in Leopard

    I am pulling my hair out with my MacBook Pro 2.4 GHz Intel Core 2 Duo Laptop running with Leopard. 3 weeks ago my laptop had a Kernal Panic. I made sure I had all my files backed up to my external drive which is a Western Digital My Book Essential Ed

  • Asset Report with old Asset Number in the Second description text field

    I have a requirement for a report in the Asset accounting. User wants a report where in he can see the asset details with the legacy asset number which is entered in the second description field in the Asset Master.  I executed the available reports

  • Change password from the webmail OSX 10.4.5 - INSTRUCTIONS

    Working with OSX 10.4.5 This instruction is based on hints found in this and other forums on the web, thanks to all the people who worked on this solution!!! Download the "change_passwd". Follow the instruction from the plugin. Change some files as f

  • How to change Asset Capitalization date ?

    Hello All Experts, I want to chnage asset capitilizatio date so how can I ? Experts guidance is needed. Regards, Pankaj.

  • Purchase requisition after MRP for Semifinished & raw material

    Hello Gurus, Please guide me in following scenario : FERT - X ---> HALB (subcontracting) - Y ---> ROH - Z Requirement : X - 1000 , Y - 1000 & Z - 1000 In this case, when I will take the MRP for X ,then MRP will generate PR for Y & Z. But in my case,