Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Can I allow local auth. from the CLI?

This thread has been viewed 5 times
  • 1.  Can I allow local auth. from the CLI?

    Posted Mar 18, 2013 03:32 AM

    Hello!

    We have a problem: our customer unchecked checkbox "Allow local authentication" on Admin page of controller. Becouse we lost admin access to controller.

    Also our customer forgot "enable" password :smileymad: . But I have access to serial port of controller and (theoretically) "enable" password isn`t a problem for me.

    But... Can I enable "Allow local authentication" logon method from the CLI??? What should I do for this?

     

    P.s. I know one method - reset controller to factory defaults but it`s not right... Maybe.

     

    Best regards.



  • 2.  RE: Can I allow local auth. from the CLI?
    Best Answer

    Posted Mar 18, 2013 05:54 AM

    I'm not sure but I guess you can use the password/forgetme procedure from the console: http://community.arubanetworks.com/t5/ArubaOS-and-Controllers/Resetting-enable-password/td-p/15093

    If you are in with administrative privileges you can do pretty much everything.

    Did the customer uncheck the "Local Authentication Mode" option at Configuartion/Administration? If so I guess "no mgmt-user localauth-disable" will do the job.



  • 3.  RE: Can I allow local auth. from the CLI?

    Posted Mar 18, 2013 07:24 AM

    Thank you! Problem has solved!

     



  • 4.  RE: Can I allow local auth. from the CLI?

    Posted Mar 18, 2013 06:58 AM

    Hi,

    :smileyhappy:

    Good morning,

    Here you go:

     

    To restore the admin password on the controller, follow these steps:
    Log in from the console.
    Use "password" as the user name and use "forgetme!" as the password.
    Enable the mode password as "enable".
    In configuration mode, enter the ‘mgmt-user admin root’ command to reset the admin password.
    Re-login using the new admin password.
    In configuration mode, enter the ‘enable secret’ command to reset the enable mode password.

    For example:



    User: password
    Password: forgetme!
    (aruba) >enable
    Password: enable
    (aruba) #configure terminal
    Enter Configuration commands, one per line. End with CNTL/Z
    (aruba) (config) #mgmt-user admin root
    Password:
    Re-Type password:
    (aruba) (config) #exit
    (aruba) #exit
    (aruba) >exit

    User: admin
    Password:
    (aruba) >enable
    Password: enable
    (aruba) #configure terminal
    Enter Configuration commands, one per line. End with CNTL/Z
    (aruba) (config) #enable secret
    Password:
    Re-Type password:
    (aruba) (config) #write memory

     

     

    after you will do it - you will able to log into the controller with the new password/enable password and to enable the local auth.

     

    have a gr8 day.

     

    me



  • 5.  RE: Can I allow local auth. from the CLI?

    Posted Mar 18, 2013 07:23 AM

    Thank you for answer.

    I'm tried it - I'm restored an admin account and "enable" password, but I did not have an admin access from web-interface.

    Solution have been described in post #2: it`s command "no mgmt-user localauth-disable"

     


    Thanks a lot! Problem has solved!

    P.s. I'm apologize for my bad english :)



  • 6.  RE: Can I allow local auth. from the CLI?

    Posted Mar 18, 2013 07:25 AM

    Glad to hear it! :smileywink: