AAA Ganymede + with backup local auth

Hello

I try to get my switches/routers/etc to aaa allows you to restrict access to the configuration of the devices on my network. I have the aaa authentication to GBA v3.3 now, but for some reason any my local user no longer works. I would like to have the possibility of a connection to access local, just in case my ACS becomes unavailable.

My config on a 2950 is...

version 12.1

Service nagle

no service button

tcp KeepAlive-component snap-in service

a tcp-KeepAlive-quick service

horodateurs service debug uptime

Log service timestamps uptime

encryption password service

!

AAA new-model

connection authentication AAA SMOC-access group Ganymede + local select none

AAA authorization exec SMOC-access group Ganymede + local

AAA SMOC-access authorization network group Ganymede + local

AAA accounting exec SMOC-access arrhythmic group Ganymede +.

AAA accounting network SMOC-access group arrhythmic Ganymede +.

Select the secret xxx

activate the password xxx

!

username admin privilege 15 secret xxx

RADIUS-server host 172.20.2.25 key xxx

RADIUS-server key xxx

radius-server administration

line vty 0 4

exec-timeout 15 0

password xxx

exec SMOC-access permission

exec accounting SMOC-access

Synchronous recording

SMOC-access connection authentication

length 48

line vty 5 15

password xxx

!

The only time wherever the local user will work is when your RADIUS server is not available. You can test by putting in the wrong key of Ganymede and establishing a new seeiosn. Be sure to keep the original session open just in case :-)

HTH and rate please.

Tags: Cisco Security

Similar Questions

  • Re-use PCs as computer ThinClient with backup Windows 7 local installation

    Hi all

    The administration wants to try to move all public machines to use VMware View but worries about this defect while they want a local installation of Windows 7 on the boxes in an emergency. What would be your suggestions to take a Dell Optiplex 790 and act as a default computer ThinClient but have the option to connect to a local Windows 7 installation if needed?

    In the past, we have reallocated older Dells with a local installation of XP using this configuration

    http://Hyperinfo.WordPress.com/2009/06/26/VMware-view-client-as-a-shell-for-XPe-and-XP-Pro-clients/

    He basically calls customer view as default shell instead of Windows XP explorer.exe and if someone leaves out of the customer view that is called right back up. We have used a local group policy to cut the user's ability to use 'Ctrl + Alt + Del' so that they could not get into the Task Manager and run explorer.exe (or control panel or regedit etc...) but which proved a bit problematic if we wanted to make changes to the underlying XP install, we had to start mode without failure and set explorer.exe as shell by default... blah blah, blah...

    Any suggestions you could provide would be greatly appreciated.

    -Brian

    We use VDI of DevonIT blaster on our machines reassigned. We do the installation where it erases the hard drive and you can start only for the Thin Client but they have an installation option to do a dual-boot with the existing operating system. Very easy to install to Pop in the CD and a few clicks later, you're done.

    Having said that I prefer using the customer base material zero thought. Make management easier, faster start-up and low energy consumption are some of the benefits of the zero clients.

  • Load new Time Capsule with backup t. m.?

    I have an end 2013 27 "iMac running OS X El Capitan, version 10.11.6, with a new 3 TB Time Capsule. In the process of upgrading my original model A1470, 2 TB Time Machine awkwardly, I managed to detach the tablecloth of the end circuit rather than simply ripped hard drive making rubber on the 2 TB hard drive itself. This time Capsule is actually useless now. I installed the original drive work with my TM backups in a USB 3 enclosure with the intention of transferring its contents to my new Time Capsule. When the original Monte drive, it shows as 3 (?) partitions, labeled: APconfig; APswap; and the data. 'Data' has 84,46 GB of data in files "Backups.backupdb" and "ShareRoot. The other partitions are essentially empty-APconfig with a single file "AFP.reconect_keys" to 24 bytes and a total content of 15.6 MB and APswap without files containing 15.3 mb.

    How to use this original TC hard disk to load my backups Time Machine on my NEW 3 to Time Capsule? I only discovered how to load a T.C. from file to archive hard disk, but not the original files of TC.

    Any ideas will be appreciated.

    What you are, indeed, now doing is to copy/move an existing Time Machine backup 'network', a local disk to another drive (aka, your new Time Capsule) network.

    Basically, Time Machine uses a different backup format with readers local vs. network drives. You now have a backup of "network format" on a local disk. Time Machine will not be able to use this backup 'local', as it is, because it is not in a format that is "local." Sorry if that sounds confusing. It was confusing for me just to write it.

    A method that would work would be to clone the backup, but it only works when the two backups will be 'local format' ones.

    Worst case, I recommend that you come to start a new backup and use the one as archive.

  • AnyConnect local auth

    I configured webvpn/AnyConnect on an ASA. This firewall has also IPSec for remote access configured (and work). When I try and connect to the webvpn, I get the following error.

    Unauthorized user to access AnyConnect Client, please contact your administrator

    I think I have good sound because users of IPSec use RADIUS to authenticate and webvpn is also. I want webvpn to use only the local database at the moment. Someone knows how to put webvpn for local auth?

    WEBVPN as uses a group of tunnel for this validation of the user, if it is not expressly defined it will use namely 'DefaultWEBVPNGroup' by default in this section, you must enter DefaultWEBVPNGroup General-attributes tunnel-group mode and enable the LOCAL server as shown below:

    attributes global-tunnel-group DefaultWEBVPNGroup

    LOCAL authentication-server-group

    NOTE: If this webvpn already uses the RADIUS to validate users, you must create another group of tunnel where you set LOCAL authentication and ensure that this group of WEBVPN Tunnel is chosen by the user. This can be done with the group alias or group url on the ASA.

  • aaa model change to locally authenticate admins

    This aaa model looks Greek to me - I need to change so AP admins and technicians are authenticated locally without breaking something else, he does, as authentication of the clients of a radius server when they join. Is it still possible? I could really use a hand on this one.

    aaa new-model

    !

    aaa group server radius rad_eap

    server 172.x.x.247 auth-port 1645 acct-port 1646

    server 172.x.x.248 auth-port 1645 acct-port 1646

    !

    aaa group server radius rad_mac

    aaa group server radius rad_acct

    aaa group server radius rad_admin

    aaa group server tacacs+ tac_admin

    aaa group server radius rad_pmip

    aaa group server radius dummy

    !

    aaa authentication login default group rad_eap local

    aaa authentication login eap_methods group rad_eap

    aaa authentication login mac_methods local

    aaa authorization exec default group rad_eap local

    aaa accounting network acct_methods start-stop group rad_acct

    under your line vty 0 4, what do you have?  You can just have the local connection as long as you have a local user name and password created?

    username privilege 15 password

    line vty 0 4

    local connection

  • Satellite A300 Vista - will not start cd/DVD with backup

    Hello world

    I have a big problem with Toshiba a300. Windows Vista is not starts.

    Watch only the menu with 2 options: first "fix the system" - when I choose this option 10 seconds later I see messeage: click OK to turn off the computer.
    When I choose the second option in my laptop restart every time.

    I tried after turning on the computer, press F8, but all the option in this menu do NOT fix the problem.
    I have no CV/DVD to my computer.
    After the first time I don't burn DVD with backup.

    I have really now how can I install system with recovery patriction. What softwere I need and how do I do it?

    Thanks for help

    Hello

    Sat A300 and other new models of laptops are equipped with HARD drive recovery option. This HARD drive recovery should allow you to recover the laptop without the use of all disks.
    In order to start the procedure for HARD drive recovery, you need to press F8. Then choose the first option called fix my computer. Then new window pops up and there you have to choose Toshiba HDD recovery. All that s.

    But if this procedure don't work (no matter why) then you will need to use the Toshiba recovery disc. If you n t create a floppy disk for recovery of a hand and the laptop will not start, then you will have to buy a drive for recovery of this page:
    https://backupmedia.Toshiba.EU/landing.aspx

    Good bye

  • iPhone (with iOS9.1) initialize with backup using iOS9.1: incompatibility problem

    Hi guys.

    I bought an iphone 6s (mounting iOS 9.1) and tried to initialize with the iCloud backup made with my previous iphone 5 using iOS9.2.

    When I try to choose the back upward, I got a message saying "no backup is compatible with iOS 9.1 present on this phone.

    What can I do to solve the problem?

    Thank you

    A typo in in the subject...

    iPhone (with iOS9.1) initialize with backup using iOS9. 2: incompatibility problem

  • I save by mistake several times my C drive to the D drive and this resulted in my D drive is almost full with backups of 150 GB. How can I delete the backups of my D drive?

    I make mistake and have backed up all my C drive on my D drive contains and this resulted in my D drive is almost full with backups of 150 GB drive C. How can I clean all my backups of my D drive?

    Hi, Mr. flame.

    What is your operating system?

    If you have been creating full backups, the backup only that you keep is the last.

    Data backup file: offers the possibility to delete backups of data on the target files to free up space.

    Backup disk space management

    http://blogs.technet.com/b/filecab/archive/2009/11/23/managing-backup-disk-space.aspx

    You can also delete them using disk cleanup

    http://Windows.Microsoft.com/en-us/Windows7/delete-files-using-disk-cleanup

  • How can I get the changed data in a def type control containing an Xcontrol with a local variable

    Hello

    I did an Xcontrol and I inserted this control in a def type.

    When I want to change the data of the control with a local variable in a VI the VI change nothing. The change of the data is not complete

    How can I fix this problem?

    Thanks for your help

    Hello

    What is your version of LabVIEW? You have a simple example program that demonstrates this behavior?

    I found an other discussions related to your problems with Xcontrols:

    update of type defs Xcontrol faade

    No data change event generated for an XControl in a Type definition

    XControl facede.vi

    I hope this helps.

    Kind regards

  • System Restore (with backup) for Windows XP how to restore the files from here?

    I saw the other posts for this but they have not answered the question. When I look in the C drive, and open the folder backup (backup C:\My--01/12/23 1134 AM), my photos, videos and documents are not available or are invisisble. When I tried to make hidden files visible, all my desktop icons and all the Start Menu program buttons disappear. I can see the files when I search with a software such as jdiskreport - 1.4.0, but I'm unable to move with this program. When I tried to move them with jdisk... they is locked in the tree of files of jdiskreport. Whenever these trees of missing or file icons has locked, I had to restore to the good previous restore point. In my view, the full restoration of the system (with backup) fails and should be avoided at all costs.

    So, if someone knows a way to access these files, I would appreciate the help of course. And please, no answers don't like "cannot not you just copy and paste?" because it is not currently a solution until the files are visible without erasing my desktop and the Start Menu.

    Hello

    Select the advanced restore options to restore the files. See the steps in the following article.

    http://www.Microsoft.com/resources/documentation/Windows/XP/all/proddocs/en-us/restore_overview.mspx?mfr=true

  • I can connect to my network, but with access "local only".

    Access to the "Local" network only
    I can connect to my network, but with access "local only".  Internet became more intermittent (not sure if that is related or if I guess it) and did not work in several weeks.  Desktop computer is plugged into the router, but have the same problem when it is plugged into the DSL modem.  Other computers on the same router (wireless or other) work very well.  Recently, I removed Mcaffee and installed MS security essentials.  I uninstalled mcaffee of programs and settings then used the mcaffee removal tool to lighten the rest.  I uninstalled and reinstalled MS security essentials.  I thought it might be a firewall issue, but I get error 0x6D9 when I try to start it.  I tried all the steps in the following post, nothing helps.  Any other suggestions?

    ______________________

    You can follow the steps below and check if that helps you solve the problem.

    Method 1

    Try to power cycle the router and the computer and check if it helps.

    On the PC:

    1. Save your work and restart the machine.

    On the router or modem (if wireless printing):

    1. Unplug the router and the modem.
    2. Wait 30 seconds.
    3. Plug in the modem and wait for it to come to the ready state.
    4. Plug in the router.

    After you put cycle check the connection between the router and the computer.

    Method 2

    If the steps above do not help, you mayreset TCP/IP stack. To reset access the link below and either click on "Fix it for me" or follow the instructions to fix it yourself:http://support.microsoft.com/kb/299357
     
    Disable the IP helpdesk:
    1 hold the Windows key and type R, type "services.msc" (without the quotes) and press enter
    2. scroll down to the IP assistance service, right-click on it and select Properties
    3. in the drop-down list box that says "Automatic" or "Manual", set it to disabled and then click 'apply '.
    4. then click on "Stop" to stop the service from running in the current session
    5. click on OK to exit the dialog box

    Method 3

    Disable IPv6 and remove IPv6 virtual cards:
     
    Try to uninstall IPv6 on all interfaces, the removal of virtual cards of IPv6 and reset the TCP/IP stack. To remove the IPv6, go to the properties for each network adapter, and deselect the check box next to the Protocol "Internet Protocol version 6 (TCP/IPv6), which will turn off, or select it and click on uninstall, which withdraw power off the computer.» Then go into Device Manager and remove any 4to6 adapters, adapters miniport WUN or tunnel adapters.
    NOTE: You should do this for each network connection, even if they are disabled.

    Method 4

    Disable the DHCP Broadcast Flag:
    Link: http://support.microsoft.com/default.aspx/kb/928233
    Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:
    http://support.microsoft.com/kb/322756.  How to back up and restore the registry in Windows
     
    Windows Vista cannot obtain an IP address from certain routers or some non-Microsoft DHCP servers
     
    To resolve this issue, disable the DHCP BROADCAST flag in Windows Vista. To do this, follow these steps:


    1. Click Start, type regedit in the search box, and then click regedit in the list programs.
    2. If you are prompted for an administrator password or for confirmation, type your password, or click on continue.
    3. Locate and then click the following registry subkey:
    4 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ {GUID}
    5. in this registry path, click the (GUID) subkey that corresponds to the network adapter that is connected to the network.
    6. on the Edit menu, point to new, and then click DWORD (32-bit) value.
    7. in the new area #1, type DhcpConnEnableBcastFlagToggle and press ENTER.
    8. right click on DhcpConnEnableBcastFlagToggle, then click on modify.
    9. in the value data box, type 1 and then click OK.
    10. close the registry editor.
     
    By setting this registry key to 1, Windows Vista's trying to get an IP address using the BROADCAST flag in DHCP Discover packets. If that fails, he will try to obtain an IP address without using the BROADCAST flag in DHCP Discover packets.
    You can also try uninstalling and reinstalling the driver for the wireless card.

    ________________

    Thanks for any help!

    Hello

    All changes to the software or hardware of the computer?

    Method 1:

    Visit the link below and follow the steps.

    Of network connectivity status incorrectly as 'Local' only on a Windows Server 2008 or Windows Vista-based computer that has multiple network cards

    http://support.Microsoft.com/kb/947041

    Method 2:

    Update the NIC drivers and check.

    Network adapter problems

    http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-network-adapter-problems

  • A backup made with "Backup And Restore" on xperia z2 cannot be downloaded to a synchronization service?

    I backed up my xperia messages, contacts and more... (checked eveything) in "Backup And Restore" application and I chose to go back to my sd card. Now, when I go to the command file and look for the back up, I can't find (the file is that contains all the data that I saved), also it is not present in my memory. The reason why I want to find is that I want to upload to syncing like Dropbox or Mega service, because it takes so much space on my sd card.

    I tried to find the backup also file to manage the files from the device to the computer, but it is not found, and if I browse the application backup and restore on my xperia, I see that I can restore the backup that I did.

    However, is it possible that I can download the backup that I did with backup and restore application on my xperia to a synchronization service?

    @uliwooly @Alam1998

    I have passed this:

    https://talk.sonymobile.com/T5/Xperia-Z5-Z5-compact-Z5-premium/online-backup/m-p/1082198#U1082198

    Maybe when I get information I can update this thread too.

    EDIT: The solution can be found in the link above.

  • BlackBerry Q10 maintains the factory restore setting whenever it restarts. It cannot be restored with backup files too.

    Can someone help me with this problem. His cannot be restored with backup files. each time it ends with the restoration with previous backup it went back to the factory setting. its so annoying. Help me.

    http://www.BlackBerry.com/BTSC/KB36747 found this in another thread. the problem with this software.

  • Win 7 on domain, suddenly starts with the local user pretty domain og user

    Some of our clients in the field suddenly starts with the local system rather than the domain user administrator account.

    Does anyone have an idea on why this happens. Or where to look.

    Hello

    Welcome to the Microsoft Community Forums.

    The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums.

    http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

    Hope this information helps.

  • synchronize the clock of your computer with your local time?

    synchronize the clock of your computer with your local time?

    Windows 7 must be configured by default to set his time using windows.time.com as an NTP server.  Double-click the clock in the taskbar, and then select the time tab Internet.  A source of time NTP is configured?

    Brian Tillman [MVP-Outlook]

Maybe you are looking for

  • Can not see address of the Web site, FF29.0

    I tried to customize my toolbar when I noticed that I had managed to remove details of the address of the Web site, I can see it is no longer. What do I need to reinstall?

  • iTunes for Mac

    How can I stop iTunes to automatically add each audio file I opened to my iTunes library? I create projects that use a variety of audio files, but I don't want them added to my iTunes library or in iTunes anywhere. To stop this problem any help would

  • TRYING TO SEARCH ON THE SOFTWARE MENU

    I WANT TO KNOW HOW TO PRINT PICTURES ON MY NEW HP1510PSC BUT CANNOT FIND A WAY TO GET THE MENU

  • After you import the MSWMM file in Windows Movie Maker, the system hangs

    MSWMM FREEZES (what a surprise) After opening MSWMM and import my project that the cursor movement will begin erraticaly i.e. movement one or two seconds after I try to point and the operation I required will take his time is erratic in the activatio

  • Former installation problem program under Windows 7 64-bit

    I installed the 64-bit Windows 7, but I need to run some old software, for which I have a CD. (Actually I think it is 16-bit. Well, I know it's a dinosaur, but this is my situation.) Naturally, setup.exe is also 16-bit (perhaps 32 bits, but I doubt i