About AAA new-model

[ccna-angus]

Hi everyone,

I want to know if this is Cisco default privilege behavior when logging as user with privilege 15 local account, the prompt always giving me > level until I have to type enable to get #:

How do I login user with privilege 15 in aaa to get switch# prompt directly?

Here is config:

username admin privilege 15 secret 5 $1$kzA3$KlDvZHlhTcB4D/La2gLPt.

aaa new-model

aaa authentication login default local

aaa authorization exec default local

line vty 0 4
transport input ssh
line vty 5 15
transport input ssh
!

[Gagandeep Singh]

Use "priv level 15" under  VTY lines...

Regards

Gagan

PS: rate if it helps!!!

[ccna-angus]

I know that command " pri 15" under vty will work. My point is why " aaa authorization exec default local" not apply to admin account when vty in?

[Collin Clark]

It depends, what is authorizing the login? Gagan noted the easiest way which bypasses the authorization.

[rasmus.elmholt]

Try the "login local"/"login authentication default" command under the line vty/con

Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#username admin privilege 15 secret admin
Switch(config)#aaa new-model
Switch(config)#aaa authentication login default local
Switch(config)#aaa authorization exec default local
Switch(config)#end
Switch#
*Dec 29 13:35:11.252: %SYS-5-CONFIG_I: Configured from console by vty0 (192.168.2.2)

Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#line con 0
Switch(config-line)#login local
 ^
% Invalid input detected at '^' marker.

Switch(config-line)#login ?
 authentication Authentication parameters.

Switch(config-line)#login au
Switch(config-line)#login authentication ?
 WORD Use an authentication list with this name.
 default Use the default authentication list.

Switch(config-line)#login authentication default ?
 <cr>

Switch(config-line)#login authentication default
Switch(config-line)#end
Switch#exit

Press RETURN to get started.







User Access Verification

Username: admin
Password:

Switch#
Switch#