39-15
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
Setting the Enable Password
The login password controls access to the user mode CLI. The passwords are case sensitive, contain up
to 19 characters, and use any printable character including a space.
Note The passwords that were set in releases prior to software release 5.4 remain non-case sensitive. You must
reset the password after installing software release 5.4 to activate case sensitivity.
To set the enable password for local authentication, perform this task in privileged mode:
This example shows how to set the enable password on the switch:
Console> (enable) set enablepass
Enter old password: <old_password>
Enter new password: <new_password>
Retype new password: <new_password>
Password changed.
Console> (enable)
Disabling Local Authentication
Caution Make sure that RADIUS or TACACS+ authentication is configured and operating correctly before
disabling local login or enable authentication. If you disable local authentication and RADIUS or
TACACS+ is not configured correctly, or if the RADIUS or TACACS+ server is not online, you may be
unable to log in to the switch.
To disable local authentication on the switch, perform this task in privileged mode:
Task Command
Set the password for privileged mode. Enter your
old password (press Return on a switch with no
password configured), enter your new password,
and reenter your new password.
set enablepass
Task Command
Step 1
Disable local login authentication on the switch.
Enter the console or telnet keyword if you want to
disable local authentication only for the console
port or Telnet connection attempts.
set authentication login local disable [all |
console | http | telnet]
Step 2
Disable local enable authentication on the switch.
Enter the console or telnet keyword if you want to
disable local authentication only for the console
port or Telnet connection attempts.
set authentication enable local disable [all |
console | http | telnet]
Step 3
Verify the local authentication configuration. show authentication