multiple password on a cisco router

[herri]

Dear ALL

I want to make several users login to a cisco router with different telnet password and enable password

How can I do that ?

Best Regards
Herri

 

[Jsteve]

One method would be to assign a password to each vty line.

router(config)# line vty 0
router(config-if)#login
router(config-if)#password xxxxx

router(config)# line vty 1
router(config-if)#login
router(config-if)#password xxxxx

router(config)# line vty 2
router(config-if)#login
router(config-if)#password xxxxx

and so on, up to vty 4

 

[ChrisAC]

router(config)#username billy password bob
router(config)#username pineapple password chunks
router(config)#username darth password vader

.... an so on ....

line vty 0 4
exec-timeout 15 0
transport input telnet

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************

 

[Saeed42]

In a situation like this I would probably use Tacacs or radius server Don't be content with being average. Average is a close to the bottom as it is to the top

 

[wybnormal]

I have to agree.. TACACS+ or Radius.. it's much easier to manage. I did work for one place where they were very worried and so even if ACS(Cisco Secure) passed the user ID/password, there was a local database to check.. a royal pain when updates were needed.

MikeS
Find me at

http://www.packetattack.com

"The trouble with giving up civil rights is that you never get them back"

 

[svermill]

IF you don't have TACACS or RADIUS and you decide to go with the

router(config)#username name password pass

concept, I think you need to add

router(config)#line vty 0 4
router(config)#login local

Don't put passwords on your individual vty lines because you have no control over what line gets used. Whatever comes up next in the rotary is what gets assigned.

 

[jdavis1]

If you don't have a radius or tacacs server, you can use AAA. Try this:

aaa new-model
aaa authentication login default local

username userone password userpwd
username usertwo password blahblah

There is only one enable password, however. I think that there is some way to grant users certain privelege levels without having them use the enable password, but I've never tried it.

-Jeff