«

What is the relationship between aaa authentication and the password
statement under vty lines? This is a general IOS question, but the
specific box is a 3750 SMI with 12.1.

If I have a configuration with
aaa authentication local default local
and some username xxx statements, they seem to override whatever I put
in the password statement under the "line vty x x" and "line cons 0". My
question is whether I should even be coding the password -- does it ever
get used? The reversable encoding of the pw is an exposure which I
might as well avoid if it is never needed.

/Chris, UCLA

Hello!

If you configure

aaa authentication login default local

then there is no sense to configure password on line vty, because it
wouldn't be used for authentication. IOS will use configured 'username' to
check login/password.

There is no 'aaa authentication local' subcommand as far as I know, though I
don't have 3750 to check.

--
Ivan

<> skrev i meddelandet
news:...
> What is the relationship between aaa authentication and the password
> statement under vty lines? This is a general IOS question, but the
> specific box is a 3750 SMI with 12.1.
>
> If I have a configuration with
> aaa authentication local default local
> and some username xxx statements, they seem to override whatever I put
> in the password statement under the "line vty x x" and "line cons 0". My
> question is whether I should even be coding the password -- does it ever
> get used? The reversable encoding of the pw is an exposure which I
> might as well avoid if it is never needed.
>
> /Chris, UCLA