<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt">Hi All,<br><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><span></span><div id="yiv699581293"><div><div style="color:#000;background-color:#fff;font-family:times new roman, new york, times, serif;font-size:12pt;"><div><br></div><div>I have issue when i using enable password per user (not on global config with user $enab15$ etc.) and every user using different password for cisco enable on tac_plus server. Refer to the config that i send before i can using AAA for cisco devices with tac_plus but if i login using user1, then i can use password "user1" or "enauser1" and after login success, i can enter privilege mode using password "user1" or "enauser1" and same for user2. In normal condition should be i just can
login using user1 with password "user1" (failed if using password "enauser1" and i just can enter priviledge mode using password "enauser1" (failed if using "user1").</div><div><br>user = user1 {<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>default service = permit<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>login = cleartext user1<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>enable = cleartext <span
style="color:rgb(192, 0, 0);
font-weight:bold;">enauser1</span><br>}<br><br>user = user2 {<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>default service = permit<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>login = cleartext user2<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>enable = cleartext <span style="background-color:rgb(255, 255, 255);color:rgb(192, 0, 0);font-weight:bold;">enauser2</span><br>}<br><br>And if i configure enable password per
user and every user using the same enable password (like config below), all
working like suppose to be it mean if i login using user1 i just can using password "user1" (can't using password "enapwd") and i just can enter priviledge mode using password "enauser" (can't using password "user1").</div><div><br></div><span class="yiv699581293tab"></span>user = user1 {<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>default service = permit<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>login = cleartext user1<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab">
</span><span class="yiv699581293tab"> </span>enable = cleartext <span style="color:rgb(192, 0, 0);
font-weight:bold;">enauser</span><br>}<br><br>user = user2 {<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>default service = permit<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>login = cleartext user2<br><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span><span class="yiv699581293tab"> </span>enable = cleartext <span style="background-color:rgb(255, 255, 255);color:rgb(192, 0, 0);font-weight:bold;">enauser</span><br>}<br><br>Need your advice for solve this
issue.<br><br>Tx,<br>Ricki<br> </div></div></div></div> </div> </div></body></html>