"console-only admin user enable" no valid!

[a3093]

good morning,

the following command "console-only admin user enable" not valid for 6250. Is there a similar command with the same result?

thanks!

[one6f]

Hi,
it is a default setting, you don't need to do anything.
At switch start up, Authenticated Switch Access is available only through console port via the local database. And the user is admin.
Authentication for other management interfaces (Telnet, FTP, etc.) is disabled. A suitable command to to do this would be:

Code: Select all

aaa authentication {console | telnet | ftp | http | snmp | ssh | default} server1 [server2...] [local]
no aaa authentication [console | telnet | ftp | http | snmp | ssh | default]

For further information, please consult the respective documentation, such as CLI Reference Guide, Switch Management Guide...

[a3093]

yes, the documentation says it is set by default, however I can connect with the admin user by telnet. In the documentation I have seen nothing to change it.
I'll try with

Code: Select all

no aaa authentication [console | telnet | ftp | http | snmp | ssh | default]

thank you one6f!!!

[one6f]

If you want to deny access to the well-known service ports you can use no ip service command

Code: Select all

no ip service telnet ftp