when i ssh in not going straight into enable mode

[robertkwild]

hi all,

so this is what it looks like when i ssh in the switch, as you can see i need to go into "enable mode"

login as: admin
Keyboard-interactive authentication prompts from server:
| Password:
End of keyboard-interactive prompts from server
4510MCR01>enable
Password:
4510MCR01#

but i have made it so my user auto goes into run mode 15 ie read/write, il show you in "sh run"

username admin privilege 15 secret 5

anything else i need to do for my user to go straight in enable mode

thanks,

rob

[MHM Cisco World]

Yes you need 

Aaa authorization exec defualt local 

If you use aaa new-model and only local user 

MHM

[robertkwild]

didnt work

[MHM Cisco World]

can I see the aaa config and vty line 
MHM

[robertkwild]

aaa new-model
!
!
aaa authorization exec defualt local
!
!
!
!
!
!
aaa session-id common

line vty 0 4
 session-timeout 10
 transport input ssh
line vty 5 15
 transport input ssh

i couldnt delete 0 4 as i imagine its the system

[MHM Cisco World]

this example show you that using exec work for users 
BUT the note I see I dont if it bug or it hardcoded in SW/R of Cisco
is username admin can not access after add exec so add new username and specify priv for it and make exec direct the user to it privilege level. 
thanks 

MHM 

[robertkwild]

but i dont want every user to go into enable mode by default, only certain usernames

i have these in my "sh run" , what are these and are these the reason

aaa new-model

aaa session-id common

[MHM Cisco World]

The other user that use privilege less than 15 and you after add above command will need to add enable password to access conf+t 

For user that have privilege 15 no need that.

This again if you use only user in local db.

MHM

[ammahend]

under line vty configure this and try

line vty 0 4

privilege level 15

[robertkwild]

but wont this mean anyone will go into default enable mode?

[ammahend]

If they have Priv15 credential they will get into priv mode not enable mode.

[robertkwild]

but my user is already privilege 15, my problem is when i login ssh its not going straight to enable

[balaji.bandi]

what device model and IOS code running on it ?

Hope you are working on Local users (not any TACACS ?) - below example one user with enable password - other with directly to enable mode.

enable password mypassword
enable secret mysecret
username user1 pass userpass
username balaji privilege 15 pass bandipassword
!
line vty 0 4
login local
privilege level 15

[robertkwild]

but if i do for line vty 0 4, wont it mean all users will get enabled by default?

[balaji.bandi]

that is te reason you have 2 usernames as example