From: Digital Yemeni (digital.yemeni@gmail.com)
Date: Sat Mar 24 2007 - 07:19:39 ART
SW1(config)#do sh run | i aaa|dot1x
aaa new-model
aaa authentication dot1x default group radius
aaa session-id common
dot1x system-auth-control
SW1(config)#line co 0
SW1(config-line)#login authentication default
AAA: Warning authentication list "default" is not defined for LOGIN.
Actually it gives a warning message and the "login authentication default"
was ignored and never been applied! So, from now on, it's OK to forget the
"aaa authentication login default none" as Cisco started to remind you to
put it! ;-)
Thanks for your reply Mr. Abderrahim!
On 3/24/07, Abderrahim sadki <a_sadki1@hotmail.com> wrote:
>
> Well it depends on your config under the line con 0. If it says " no
> login" then you shouldnt have any problem. Abderrahim
>
> --------------------------------------------------------------------
>
> From: "Digital Yemeni" <digital.yemeni@gmail.com>
> Reply-To: "Digital Yemeni" <digital.yemeni@gmail.com>
> To: ccielab@groupstudy.com
> Subject: dot1x & AAA
> Date: Sat, 24 Mar 2007 17:07:26 +0800
> >Some people mentioned that the "aaa authentication login default
> none" must
> >be put along with the dot1x authentication. However, my config looks
> like
> >this:
> >
> >aaa new-model
> >aaa authentication dot1x default group radius
> >dot1x system-auth-control
> >
> >I was able to log off of the console and logged in back without any
> problem!
> >
> >
> >Was this a problem in older IOS (locking all vty lines and console)
> and they
> >corrected it in newer versions? Any comments on this?!
> >
> >
> >--
> >Best Regards!
> >Digital, CCIE# to be assigned by Cisco when it collects enough $$
> out of me!
> >:p
> >
> >_______________________________________________________________________
> >Subscription information may be found at:
> >http://www.groupstudy.com/list/CCIELab.html
>
> ------------------------------------------------------------------------
>
> Don't just search. Find. MSN Search Check out the new MSN Search!
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- Best Regards! Digital, CCIE# to be assigned by Cisco when it collects enough $$ out of me! :p
This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:52 ART