Issue of AAA - Line Con 0 = login authentication (password)

Good afternoon everyone,

A simple nice for someone I am sure... I only of remote access to the network kit and therefore cannot test access to the Console.

I have a switch with the following configuration (excerpt)

!

Password username Admin Password123

!

AAA new-model

AAA authentication default login group Ganymede + local

!

Line con 0

Cisco connection authentication (where cisco is representative of a password)

NOTE: I have not username cisco password Admin in global config

My question is: with this current config access Console will stop using the configuration of default Ganymede for authentication and don't allow access to the line of the console if the cisco password is specified? In this case that the password is not defined in a global access, would be denied?

I've seen it before where you have exactly the same set up, but instead of referring to a value of password on the console line, you specify a list of names.  For example, authentication of connection local CONSOLE_USERS, which would make sense, because you would be referring to a group on the Ganymede server named CONSOLE_USERS and only users defined in this group could access through the console, while the ACS server is running!

Any assistnace appreciated as I really want to get my head around ACS unconditionally

Thanks in advance

David

Yes, David, you can safetly delete this "authentication to connect cisco" line con 0.

About radius server take a look on:

http://www.shrubbery.NET/tac_plus/

On the radius server, I recommend freeradius for these tests.

(there much capacity of fever, then cisco ACS, but it can allow you easy test of the basic functions)

---

Michal

Tags: Cisco Security

Similar Questions

  • issue certificates of 802. 1 x authentication and X 509

    Hello

    Can someone please help me with the following question:

    First off I am a guy from Windows Server/PKI/AD etc. rather than CISCO, even if I have a CCNA :)

    I take care of PKI to my company and will work with the team CISCO that are the introduction of CISCO's ISE, we will use X 509 CERT on the suppliants (desktop/laptops Windows computers mainly)

    What I want to know is something pretty basic, but I saw not written anywhere

    Question 1:

    First stop, I guess it's the AAA (ISE) server is the entity that verifies the pleading certificate X 509, rather than the AP (access wireless router for example point)? is that correct

    Question 2:

    As supplicants X 509 certificate is public (for example, it is not secure and anyone can ask what it is normal) I guess the AAA server must encrypt a (random number for example) value with the public key of supplicants (of the X 509 cert) then send this value to the supplicant by which the supplicant decrypts with its private key (that no one else has as usual). Then the supplicant figure the value even with servers AAA public key (which is held in servers announced AAA X 509 cert) cela send on the AAA server and once that deciphers AAA server (with its private key) if the value matches the value originally sent to the supplicant then the AAA server can continue with authentication etc.

    The above assumption is correct?

    If the above is correct, not ISE always act like that or can you lower the security and get just the ISE server to check whether he trusts the issuer of the certificate (CRL does OK) the pleading X 509 Cert and not bother to send the encrypted packet as described above (this of course would ensure not begging-1 is actually "supplicant" - 1).

    Thank you very much in advance

    Ernie

    Answers:

    1 - Yes, ISE verifies the certificate presented by the device of end-user (begging) against his PB of authority certificate TRUSTED internal to import in ISE root and intermediary certificates where you use CA non-public servers (this is my case for EAP - TLS) such as Verisign, Entrust, etc. UNFORTUNATELY, ISE allows you only to have 1 cert for the use of EAP in the list (PEAP, EAP - TLS, etc.), which means that you CAN not EAP - TLS and PEAP running on different SSID. The problem is now that Entrust for example use an intermediary called L1K Entrust which is not included in trust for the devices Apple and Win 7 CA. This causes a certificate not approved for IPADs warning then you need to trust this certificate but for Win 7 features the PEAP TLS Tunnel, Setup will fail if the connection cannot be established if you uncheck "VALIDATE SERVER" on Win 7 for this SSID profile.

    2 - you can create a condition that validates the issuer cert but the authorized Protocol is EAP - TLS or PEAP so that the actual process for one of these protocols, based on my understanding is actually. For example, Protocol PEAP, the configuration of the TLS Tunnel is the 1st step, so once the configured secure tunnel then the inside MSChapv2 + EAPOL is performed and finally the data passes through the tunnel

  • The code of failure of the authentication protocol Kerberos was "the user account has been automatically locked because too many attempts to invalid login or password change attempts have been requested.

    Hello

    I use Windows 7 (32-bit) with SP1.

    Quite often (at least three times a day) I am to be locked of my PC and cannot connect to 30 mts each time. I've analyzed carefully and there is absolutely nothing wrong with my ID on the front of Windows AD or group etc. policy.

    I am getting event ID 40690 in my observer of events and here are the details...

    WARNING on 09/06/2011 09:07:54 lsasrv 40960 any

    Log name: System

    Source: lsasrv with

    Date: 09/06/2011 09:07:54

    Event ID: 40960

    Task category: no

    Level: WARNING

    Keywords:

    User: SYSTEM

    Computer: workstation.companyname.com

    Description:

    The security system detected an authentication for the HTTP/http-proxy server error - nom_societe.com. The code of failure of the authentication protocol Kerberos was "the user account has been automatically locked because too many attempts to invalid login or password change attempts have been requested.

    (0xc0000234).

    I searched all possible sites and cannot find an appropriate solution.

    As it is causing a lot of inconvenience would appreciate a miracle solution as soon as POSSIBLE.

    See you soon,.

    bcshekar

    Hi bcshekar,

    The question you have posted is related to the area and would be better suited to the net Tech community. Please visit the link below to find a community that will provide the support you want.
    http://social.technet.Microsoft.com/forums/en-us/w7itprosecurity/threads

  • Try to put in place a new account but login and password do not work

    I am trying to set up a new account, but he said that the login and password do not work.  I use verizon as a server. I can go to their website and view mail, but not in windows mail.

    Account: 'incoming.yahoo.verizon.net', server: 'incoming.verizon.net', Protocol: POP3, server response: '-ERR [AUTH] Authentication failed', Port: 110, secure (SSL): no, Server error: 0x800CCC90, error number: 0x800CCC92

    Make sure that your settings are all correct.  The settings here: http://help.yahoo.com/l/us/verizon/mail/yahoomail/pop/pop-08.html are for Outlook Express, but they will be the same for Windows Mail. Brian Tillman [MVP-Outlook]

  • Creative cloud request login and password for proxy

    Hello!

    I tried to start creative cloud to download a few new updates on programs, but I have a sensitive question.

    He keeps asking me login and password for proxy. I have never used one and did not. I tried to get help from my Department, but they can't help me.

    We tried both by clicking on the button to use a proxy server, and we tried unclicking the button, restart the computer, but still the same issue. We tried using a proxy server and using the *. Adobe.com, *. adobelogin.com and *. activate.com and nothing changed. We tried the deleting the file after that in my user information regarding cloud creative (because it seemed to work for some people). We have tried to use my connection settings for the computer as a connection. I also discussed if it could be a firewall issue, but none of the sites are blocked. We also tried to inactivate the antivirus program to see if that causes problems. My computer guy told me to wait a week and see, but if something changes, but it's starting to annoy me. And this is not the first time that I had trouble downloading updates creative cloud, it always seems to be a problem or another.

    What else can we try? I don't want to reinstall everything, that will probably make no difference.

    After installing the patch, all of a sudden it worked... Strange things.

  • Login and password

    Hello

    I installed virtual server 2.0...

    When I click in Wmware Server Desktop icon, it ask me login and password before you connect to vmware...

    Where to get it?

    Thank you

    Hello

    On your screenshot, I'm guesing your running vmware server on vista?  Is so you must connect using the 'administrator' account (if your host is linux do you use root)

    You must also make sure that the vista administrator account is enabled and has a defined password. This is the password that you are using. Once you're connected, you can name (and set permissions) for other local accounts to use for the authentication process.

    Good luck.

  • Login and password for SQL in Oracle 10 g

    Hi all

    I just installed Oracle 10g on my window XP and trying to figure out where I can get my login and password to access SQL more.
    I'm new to all this and any help will be useful

    Thank you

    Jason

    You can try command line:

    sqlplus "/ as sysdba"
    

    Above will connect you as sys.

    Then you can create a new user using the following:

    create user jason default tablespace users idenified by jasonpass;
    
    alter user jason quote 10M on users;
    
    grant create session to jason;
    
    grant other privileges to jason; -- oter privileges like create table, create procedure ...
    

    Then, you can connect to sqlplus like this:

    sqlplus jason/jasonpass
    

    With greetings
    Krystian Zieja

  • What is your dialog window trying to capture my login and password?

    Hi, I'm a new dialogue window when I use Firefox to access my yahoo email account. I've never had the box ask for my login and password. It was only to give me the opportunity to click on the words "Save password." Is this a new Mozilla dialog box that displays your login details and password? Thank you

    Hello

    This is a feature in Firefox called Firefox Password Manager. It securely stores your usernames and passwords for the sites that you visit to facilitate the re enter this information at a later date.

    You can learn more about this feature in this article.

    I hope that this helps, but if you have other questions, please come back here and we will do our best to respond.

  • Can receive email, but not send, it says incorrect login or password, but it needs people to receive?

    MY mini iPad worked fine for a while then when trying to send mail has been a failure, said incorrect login or password. Can I receive ok?

    Try resetting your e-mail account. First close your Mail application completely from the window of the selector app by double clicking the Home button and drag the email preview pane up until it disappears from the display. Then go to settings > Mail, Contacts, calendar > find your e-mail provider and click on the account and the blow to remove. Then perform a forced reboot. Hold down the Home and Sleep/Wake buttons simultaneously for about 15-20 seconds, until the Apple logo appears. Then go to settings > mail... and to add the account.

  • Designjet t520: designjet t520 default login and password for web server

    Hello!

    Which is the default login and password for the web server and how to reset the password?

    Hello

    As mention Rashed, there is no password to the factory.

    Try a Restore Factory Settings.

    If this does not work, go to the Help Menu and do a Soft Reset. (Don't do the hard reset).

    For access to the support menu press on and hold the power button for 15 seconds, or at the home screen tap home, back, home, home.

    Concerning

    Mike

  • Remembering the login and password... When the patch will be applied?

    Problem:
    -very often mozilla firefox is not recal login and password but 'checkbox' is checked for recall.

    Severity:
    -boring

    -> Press and hold ALT, or press F10 to display the Menu bar

    -> go to Menu help-> select "restart with disabled modules.

    Firefox closes, then it will open with Firefox comes from base. Now follow these steps:

    -> Update ALL your plugins Firefox https://www.mozilla.com/en-US/plugincheck/

    -> go to Menu view-> toolbars-> select menu bar and toolbar Navigation--> deselection adverse of all toolbars

    -> go Menu Tools-> clear recent history-> range of time: select all ITEMS -> click details (small arrow)-> place checkmark on Cache -> click on "clear now".

    -> go to the Tools Menu-> Options-> content-> place the check on:

    Images of care 1) block popups 2) automatically) 3 turn on JavaScript

    -> go to the Tools Menu-> Options-> privacy-> History section-> Firefox will: select "Use the custom settings for history"-> REMOVE checkmark 'Permanent Private Browsing Mode'-> place CHECKMARKS on:

    1 remember my browsing history 2) Remember download history 3) remember Search History 4) accept Cookies from sites-> select the "Exceptions" button... '-> click 'Remove all Sites' at the bottom of the window "Exception - Cookies".

      4a) Accept Third-party Cookies -> under "Keep Until" select "They Expire"
    

    -> REMOVE check MARK to CLEAR the HISTORY, the CLOSING of FIREFOX

    -> go to the Tools Menu-> Options-> Security-> place the check on:

    ((1) Warn me when sites try to install modules) 2 block reported attack sites block 3) declared false web 4) remember passwords for sites

    -> Click OK in the Options window

    -> click on the favorite icon (small drop down menu icon) on Firefox SearchBar (its position is on the right side of the address bar)-> click on "Manage search engines"-> select all unwanted search engine and click on delete-> click OK

    -> go to the Tools Menu-> Modules-> Extensions-> section REMOVE all unwanted/Suspicious Extensions (Add-ons)-> restart Firefox

    You can activate your known & modules trustworthy thereafter. Check and tell if its working.

  • Default login and password do not work

    Hello

    I forgot my wifi password which I am trying to reset now. But I am unable to connect to http://routerlogin.net by using the default login and password admin and password.

    Any advice?

    Thank you!

    push reset button until the power led blinks... use the default values on the label of the router

    http://www.downloads.NETGEAR.com/files/GDC/WGR614V6/wgr614v6_ref_man_20Apr05.PDF

    Reading 7 - 7

  • Login and password of the windows Server2008 trial

    Recently, I downloaded Windows Server 2008 R2 with the first version of service pack 1.

    Never happened to me the famous 3 messages with resources to guide me, I ask you what login and password should I use to access inside the trial version because I tried with login and passwords are the most common, and nobody working.

    Thank you very much

    Support is located in the Windows Server Forums:
    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

  • Remember login and password reset computer

    How do you get the remember login and password which has been retained to reset?

    Debhutch wrote:

    How do you get the remember login and password which has been retained to reset?

    Hello

    Keep the very secret but use something very special. How many passwords you should learn? How do you keep your password when you have 5 e-mail accounts, a dozen laptop computers to connect to an another dozen applications you have to opening session to use, internet banking, credit cards... more, 41 systems that require that you must change password every 4 weeks and cannot be re-used within 13 months.

    Well, save them in one place and use a MASTER password to open the safe. Please try:

    http://www.PCMag.com/Article2/0, 2817,2407168,00.asp

    Kind regards.

  • Recently, when I try to retrieve my e-mail with windows mail, he asks me my login and password. I do not remember to be! How can I reset both?

    Recently, when I try to retrieve my e-mail with windows mail, he asks me my login and password. I do not remember to be!  How can I reset both?

    Hello

    Contact your ISP (Internet Service Provider) if they provided you with your e-mail account

Maybe you are looking for