#Mac keeps asking for vpn connection password password#

My testing switch, which worked without problems with a local user database, is repeatedly prompting me for a username and password when I try to authenticate via ACS using TACACS+.Ī simplified config that reproduces my problem:Īaa authentication login default group mcbhtacacsĪaa authorization network default group mcbhtacacsĪaa accounting network default start-stop group mcbhtacacs OK so it seems specific to AAA using my ACS servers only. It happens in CNA, but not as often so I might have not paid it any attention until now. I only started trying the web-based device manager included with 12.2 this month, and the repeated authentication problem is more pronounced using that than it is using something like Cisco Network Assistant. This might be a problem across all of my 3560s regardless of IOS version. So I'll take the test switch I know is working with local user accounts, have it use ACS, and see what happens. I first tried adding a local username to my production switch giving me this trouble, but that isn't working the switch is defaulting to ACS authentication. I'm going to try to take ACS out of the equation and add it back in.

#Mac keeps asking for vpn connection password windows#

If I log on to the switch using SSH using the same account it takes me to privileged exec mode straight away.įurther, the Windows server running ACS has several success audit entries with my AD username. What failed attempts messages says in ACS 4.1 whenever you provide credential to the switch which is prompting for username and passwiord when doing using HTTP.ĪCS' logs say it's authenticating successfully, and the user account I'm using has Level 15 (privileged exec) access. My non-production switch has a local user database set up, my Repeatedly asking for credentials over HTTP(S). It appears to behave in the same fashion: Testing back to 12.2(35)SE5, which is what the majority of my

#Mac keeps asking for vpn connection password update#

In an update to this problem, I've reverted the switch I've been

#Mac keeps asking for vpn connection password software#

So why would the first switch repeatedly ask for credentials over HTTP when the second switch with the same software does not? Tacacs-server host 10.1.2.222 key 7 [censored[ġ0.1.2.221 and 10.1.2.222 are the ACS servers, running ACS 4.1 and are linked to a pair of Active Directory domain controllers.Īside from host names, these two switches appear to have an identical AAA configuration. Radius-server host 10.1.2.222 auth-port 1645 acct-port 1646 key 7 Īnother switch that does work without repeated prompting has these relevant bits:Īaa authorization exec default group mcbhtacacs local Server 10.1.2.222 auth-port 1645 acct-port 1646Īaa authentication login default group mcbhtacacs localĪaa authorization exec default group mcbhtacacsĪaa accounting send stop-record authentication failureĪaa accounting exec default start-stop group mcbhtacacsĪaa accounting commands 1 default start-stop group mcbhtacacsĪaa accounting commands 15 default start-stop group mcbhtacacsĪaa accounting system default start-stop group mcbhtacacs The relevant bits of the running config are: While my non-production switch has a local user database set up, my production switches use two ACS servers. It appears to behave in the same fashion: Repeatedly asking for credentials over HTTP(S). In an update to this problem, I've reverted the switch I've been testing back to 12.2(35)SE5, which is what the majority of my production 3560s use. I'm also experimenting with the releases that includes the web-based device manager on my test switch, but the behaviour is similar whether the image has the web-based manager or not.

The production ones use 12.2(25)SEE3 through 12.2(35)SE5 and probably everything in between. The difference between the production 3560s and my testing one, is the test one uses IOS 12.2(53), the current version. If I'm persistent enough, I eventually get the pages or configuration screens I want.

At first I suspected this was because I'm trying to use SSL and an in-house certitficate authority to sign the switch's certificate, but this is happening in plain HTTP as well. This is different from the production switches I'm working with, that will prompt me once only and let me work. Setting this switch up for HTTP administration, I've been prompted repeatedly for my username and password both when using a browser directly and when using Cisco Network Assistant (currently 5.5). I've gone as far as configuring a 3560 switch from 'scratch' in a test environment, and am in part one of ICND 2. I'm new to IOS but I'm taking ICND 1 and ICND 2 to catch up.