I had a similar experience a while back and could not remember what the fix was. However I do believe that this article helped me to achieve the console password:
In particular the line I was missing in my config was "aaa authentication login "defaultList" local"
This is the same line that the customer was missing from their configuration in the link above. It forced the password when accessing through the console.
There is one problem with this. The switch remembers where you are, so if Engineer A attaches via console and is in EXEC mode, then closes the session, and Engineer B attaches via console, Engineer B will be placed where Engineer A left off WITHOUT a password challenge.
I cannot see where to set a session expiration for line console sessions.
vt1012
212 Posts
12666
0
Posted February 21st, 2017 07:00
What model of switch are you attempting this on?