Introduction
This document describes a problem where authentication to a Network Module Engine (NME) appears to fail.
Trying to session into a NME-WAE-502 from the router shows a login prompt, but login with WAAS (Wide Area Application Services) credentials fails as follows (in the example the NME-WAE is in slot 1):
router# service-module integrated-Service-Engine 1/0 session
Trying 192.0.2.2, 2066 ... Open
User Access Verification
Username: admin
Password:
% Authentication failed
Problem
If you're already entering the correct WAAS credentials, this issue could be due to authentication configuration on the router. Observe the login banner does NOT have "Cisco Wide Area Application Services Engine Console", check if the router has AAA (Authentication, Authorization, Accounting) configured, see below sample router configuration.
router# show run | inc aaa
aaa new-model
aaa authentication login default group tacacs+ enable
In this case you first need to login using the router credentails, press <ENTER> and only then a second login prompt will be shown were you can login using the WAAS credentials.
Solution
The login prompt shown is coming from the router, not the NME-WAE. You first need to give the router credentials, then press <ENTER> and only then the actual WAAS login prompt will appear:
router# service-module integrated-Service-Engine 1/0 session
Trying 192.0.2.2, 2066 ... Open
User Access Verification
Username: <-- router-username
Password: <-- router-password
<-- Hit <ENTER>
Cisco Wide Area Application Services Engine Console
Username: <-- waas-username
Password: <-- waas-password
Device is configured with a (well known) default username/password for ease
of initial configuration.This default username/password should be changed in
order to avoid unwanted access to the device.
System Initialization Finished.
WAAS#
At the login prompt after seeing the Cisco Wide Area Application Services Engine Console line normal WAAS credentials can be used (defaults: username: admin / password: default).
Feedback