Tacacs Login Problem

[Michel_Braga_Gu]

Hello Folks...

I put myself on a big trouble, and I hope you guys can help to get me out of it.

Here in a company I'm working for, we have a Enterasys S8 Chassis with two fabric switches and two blades with normal switches.

We were trying to configure tacacs on it, we have done a lot of tests and we've got no success.

This is the config I used the first time we've tried:

set tacacs server 1 49
set tacacs command accounting enable
set tacacs command authorization enable
set tacacs enable

This one isn't work. So I removed.

Obs:

I had established a ssh connection to put this configuration, and keep this same ssh window connection to apply or remove this configuration any time I wanted, without any kind problem, and with another ssh windows we tried to connect with our tacacs users.

So, once I still have this ssh connection established, I was able to put another configuration to try get it working, then I put this one:

set tacacs server 1 49
set tacacs command accounting enable
set tacacs command authorization enable
set tacacs enable

Exact the same, but at the end of it, I added:

set authentication login tacacs

And nothing, it haven't worked as well. So we decided to stop the tests for a while and try to make it work another day. Then we removed all the configuration above, but we forgot to remove the authentication line (set authentication login tacacs).

I read that this configuration turns the tacacs as my primary login method.

We've closed all of ssh connection windows, and since that moment I've logged out from my switch, I wasn't able to login on it anymore, neither with my tacacs user nor with my local user.

I don't know what to do.

Is there some way to login in this switch on a recovery mode, or boot it skipping my current configuration, so this way I would be able to change the configuration on my switch??

Please, someone, help me.

Sorry for the weak English and the Big Text.

[Drew_C]

I don't know for sure, but the defaults are usually public / private for read and write communities.

[Michel_Braga_Gu]

Unfortunately no... Still trying to find a way to login on it. Do you know somehow??

[Drew_C]

Hi Michel, were you able to get back into the switch?

[Curtis_Parish1]

Do you know the read/write SNMP credentials of the switch? (default or you set them?) If so you can still add the switch to netsight. I have recovered locked out switches using Netsight. There is a method of resetting the boards that involves removing them and flipping some DIP switches. Not sure if that method is published or if GTAC will have to walk you through it. Netsight can also copy the config off before the reset if you can get it set up.

[Michel_Braga_Gu]

Not yet, my intention was to do that, but unfortunately I'm locked out.

I was using the pure ssh.