![]() ![]() ![]() Jun 13 11:59:58 EDT: AAA/AUTHEN/ENABLE(00001069): Processing request action LOGIN Jun 13 11:59:58 EDT: TPLUS: Authentication start packet created for 4201(usertest) ![]() Jun 13 11:59:58 EDT: TPLUS: processing authentication start request id 4201 ![]() Jun 13 11:59:58 EDT: TPLUS: Queuing AAA Authentication request 4201 for processing I am posting below two debug, the first one with my regular network password and the second one with the local enable password Then when I check the configuration, the command line ( aaa authentication login default group tacacs+ enable) is still there.Īnyway, I ran the debug and I got the below results. The question is: How can I remove the enable secret 9 and set the number 5.įollowing your advice, I did the below process.Īaa authentication login default tacacs+ enable Then again added the command line "enable secret PASSWORD " but in this time without number 5 and when I checked the configuration the level of the enable secret is again 9. When you properly enter an UNENCRYPTED secret, it will be encrypted). You will wonder why I want to change type 9 to type 5, and the answer is because my authentication is through tacacs-server and when I am logging in this switch, this doesn't accept the password ( Password authentication fail) and this is because of the Type 9 work whit different hashing algorithm (SHA256) and typ5 work with MD5.Īnother thing when I added the command line " Enable secret 5 PASSWORD" I receive the warning ( ERROR: The secret you entered is not a valid encrypted secret.To enter an UNENCRYPTED secret, do not specify type 5 encryption. I have been trying to remove the enable secret 9 and set the enable secret 5 on Cisco 9300, but after I removed it with the command line " no enable secret" and added the command line " enable secret 5 PASSWORD" and verified with " Show run" the type 9 is still there. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |