From: ian (iyux2000@gmail.com)
Date: Sun Mar 25 2007 - 21:46:24 ART
Digital Yemeni,How are you#!
Yes, console login is indeed no longer needed. However, the problem is it is required username/password pair automatically when you enabling AAA. Therefore, it's better to configure this command or config a local database for telnet.
======= 2007-03-24 20:23:56 What you've mentioned in your letter#:=======
>SW1(config)#do sh run | i aaa|dot1x
>aaa new-model
>aaa authentication dot1x default group radius
>aaa session-id common
>dot1x system-auth-control
>SW1(config)#line co 0
>SW1(config-line)#login authentication default
>AAA: Warning authentication list "default" is not defined for LOGIN.
>
>Actually it gives a warning message and the "login authentication default"
>was ignored and never been applied! So, from now on, it's OK to forget the
>"aaa authentication login default none" as Cisco started to remind you to
>put it! ;-)
>
>Thanks for your reply Mr. Abderrahim!
>
>
>On 3/24/07, Abderrahim sadki <a_sadki1@hotmail.com> wrote:
>>
>> Well it depends on your config under the line con 0. If it says " no
>> login" then you shouldnt have any problem. Abderrahim
>>
>> --------------------------------------------------------------------
>>
>> From: "Digital Yemeni" <digital.yemeni@gmail.com>
>> Reply-To: "Digital Yemeni" <digital.yemeni@gmail.com>
>> To: ccielab@groupstudy.com
>> Subject: dot1x & AAA
>> Date: Sat, 24 Mar 2007 17:07:26 +0800
>> >Some people mentioned that the "aaa authentication login default
>> none" must
>> >be put along with the dot1x authentication. However, my config looks
>> like
>> >this:
>> >
>> >aaa new-model
>> >aaa authentication dot1x default group radius
>> >dot1x system-auth-control
>> >
>> >I was able to log off of the console and logged in back without any
>> problem!
>> >
>> >
>> >Was this a problem in older IOS (locking all vty lines and console)
>> and they
>> >corrected it in newer versions? Any comments on this?!
>> >
>> >
>> >--
>> >Best Regards!
>> >Digital, CCIE# to be assigned by Cisco when it collects enough $$
>> out of me!
>> >:p
>> >
>> >_______________________________________________________________________
>> >Subscription information may be found at:
>> >http://www.groupstudy.com/list/CCIELab.html
>>
>> ------------------------------------------------------------------------
>>
>> Don't just search. Find. MSN Search Check out the new MSN Search!
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
>
>
>--
>Best Regards!
>Digital, CCIE# to be assigned by Cisco when it collects enough $$ out of me!
>:p
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
= = = = = = = = = = = = = = = = = = = =
!!!!!!!!!!!!!!!!Have a nice day.
!!!!!!!!!!!!!!!!ian
!!!!!!!!!!!!!!!!iyux2000@gmail.com
!!!!!!!!!!!!!!!!!!!!2007-03-26
This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:52 ART