[cisco-voip] ios console access asking for old password

[Lelio Fulgenzi]

Anyone seen anything like this? I'm preparing for ios upgrades and want to monitor via the console port. I've compared this to another router and the relevant settings are the same. Could this be something on the far end TACACS+ server causing me issues?




-----
username: lelio
password:

Enter old password:

Enter new password:

Enter new password confirmation:

% Authentication failed
------

^^^

Not working                                                     working

aaa authentication login default group tacacs+ enable           aaa authentication login default group tacacs+ enable
aaa authentication login virt-users group tacacs+ enable        aaa authentication login virt-users group tacacs+ enable
aaa authentication login console group tacacs+ enable           aaa authentication login console group tacacs+ enable
aaa accounting exec default                                     aaa accounting exec default
action-type start-stop                                          action-type start-stop
group tacacs+                                                   group tacacs+
!                                                               !
aaa accounting commands 8 default                               aaa accounting commands 8 default
action-type start-stop                                          action-type start-stop
group tacacs+                                                   group tacacs+
!                                                               !
aaa accounting commands 15 default                              aaa accounting commands 15 default
action-type start-stop                                          action-type start-stop
group tacacs+                                                   group tacacs+
!
<snip>
!
line con 0                                                      line con 0
session-timeout 60  output                                      session-timeout 60  output
exec-timeout 30 0                                               exec-timeout 30 0
login authentication console                                    login authentication console
transport preferred none                                        transport preferred none
!
tacacs-server host a.b.c.6                                 tacacs-server host a.b.c.6
tacacs-server host a.b.c.7                                      tacacs-server host a.b.c.7
tacacs-server directed-request                                  tacacs-server directed-request
tacacs-server key mykey                                         tacacs-server key mykey
!

^^^

---
Lelio Fulgenzi, B.A.
Senior Analyst, Network Infrastructure
Computing and Communications Services (CCS)
University of Guelph

519-824-4120 Ext 56354
lelio at uoguelph.ca
www.uoguelph.ca/ccs
Room 037, Animal Science and Nutrition Building
Guelph, Ontario, N1G 2W1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: winmail.dat
Type: application/ms-tnef
Size: 24035 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20171011/7b0d059a/attachment.bin>