Cisco WS-X6066-SLB-APC - Content Switching Module Software Manual page 426

Configuring Authentication
To disable local authentication on the switch, perform this task in privileged mode:
Task
Step 1
Disable local login authentication on the switch.
Enter the console or telnet keyword if you want to
disable local authentication only for console port
or Telnet connection attempts.
Step 2 Disable local enable authentication on the switch.
Enter the console or telnet keyword if you want to
disable local authentication only for console port
or Telnet connection attempts.
Step 3 Verify the local authentication configuration.
You must have either RADIUS or TACACS+ authentication enabled before you disable local
Note
authentication.
This example shows how to disable local login authentication, how to enable authentication for both
console and Telnet connections, and how to verify the configuration:
Console> (enable) set authentication login local disable
local login authentication set to disable for console and telnet session.
Console> (enable) set authentication enable local disable
local enable authentication set to disable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
kerberos
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)
Recovering a Lost Password
Use the following procedure to recover a lost local authentication password. You must complete Steps 3
through 7 within 30 seconds of a power cycle or the recovery will fail. If you lost both the login and
enable passwords, repeat the process for each password.
To recover a lost password, perform the following task in privileged mode:
Connect to the switch through the supervisor engine console port. You cannot recover the password if
Step 1
you are connected through a Telnet connection.
Enter the reset system command to reboot the switch.
Step 2
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
21-16
Command
set authentication login local disable [all |
console | http | telnet]
set authentication enable local disable [all |
console | http | telnet]
show authentication
Console Session Telnet Session
---------------- ----------------
disabled disabled
enabled(primary) enabled(primary)
disabled disabled
disabled disabled
Telnet Session
disabled disabled
enabled(primary) enabled(primary)
disabled disabled
disabled disabled
Chapter 21 Configuring Switch Access Using AAA
78-13315-02