If these are Aruba/HP/HPE/Provision switches (2920/2930), then you need to configure management credentials for ssh and web individually. This is my config (using RADIUS):
aaa authentication login privilege-mode
aaa authentication web login radius server-group "CPPM" local
aaa authentication web enable radius server-group "CPPM" local
aaa authentication ssh login radius server-group "CPPM" local
The login privilege-mode may be needed to bypass the enable prompt.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Aug 05, 2024 08:15 AM
From: cmartin
Subject: Avaya 2620-24g (and others)
I can log in SSH using local manager creds. Radius and aaa are not configured in the config. The web login loads, but will not accept the manager creds. So the web server is not disabled, but the creds are not being relayed to the switch, something like that.
hostname "xxxxxxxxxxxx"
max-vlans 64
time timezone -300
time daylight-time-rule Continental-US-and-Canada
no qos dscp-map 101110
trunk 26 Trk1 Trunk
ip default-gateway 10.180.30.1
vlan 1
name "Default"
untagged 25,27-28,Trk1
etc etc
Original Message:
Sent: Aug 05, 2024 06:05 AM
From: thomasbnc
Subject: Avaya 2620-24g (and others)
Hi
can you please elaborate a bit more on what "unable to log in using GUI" exactly means? Is the web GUI showing up or is perhaps the web server disabled? Can you log in but without administrative access or is your user denied login at all?
Are you trying with a local account or RADIUS/TACACS remote auth?
Kindly, share the running configuration of your switch, with focus of RADIUS/TACACSs and/or "aaa" parts, so we can see what is configured and help you identifying the issue you have.
Regards,
Thomas
Original Message:
Sent: Aug 02, 2024 01:21 PM
From: cmartin
Subject: Avaya 2620-24g (and others)
I am unable to log in using GUI but can authenticate SSH fine. This is the case with the 2620, 2920, 2930.
Any suggestions? We have a mixed aruba managed, aruba standalone environment.