topic configuration of AAA on a firewall module in Network Access Control

configuration of AAA on a firewall module

connect101 — Sun, 10 Mar 2019 23:17:34 GMT

How to configure AAA on a FWSM (firewall module) on a catalyst C6509.

I need to protect the SSH accÃ¨s on the firewall.

This is the command line that I use right now but it is not ok think:

aaa-server TEST protocol tacacs+

exit

aaa-server TEST host 192.168.200.167

key xxx

exit

no aaa authentication telnet console LOCAL

aaa authentication SSH console TEST LOCAL

Yudong Wu — Wed, 21 Jan 2009 22:30:07 GMT

1. Is AAA server in Inside network or Outside network? you mighit need to specify "interface name" in command 'aaa-server host".

2. Make sure your SSH config is correct.

You can just use LOCAL authentication to test if SSH is working fine.

3. In later code, you can use "test aaa-server" command to test the connectivity between FWSM and AAA server.

4. Make sure FWSM is added as AAA client in AAA server. Shared key is configured the same between FWSM and AAA server.