topic Re: Need some one help in Network Access Control

Need some one help

chaitu_kranthi — Sun, 10 Mar 2019 22:59:03 GMT

Iam trying to adding the PIX firewall to my newly installed the ACS server.

after adding all the required commands still i am unable to access the firewall using local user only.

my firewall is already having some aaa commands earlier. and i am unable to clear that lines.

PIX515# sh run | inc tacacs

aaa-server TACACS+ protocol tacacs+

PIX515# sh run | inc aaa

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ max-failed-attempts 3

aaa-server TACACS+ deadtime 10

aaa-server RADIUS protocol radius

aaa-server RADIUS max-failed-attempts 3

aaa-server RADIUS deadtime 10

aaa-server LOCAL protocol local

PIX515#

some body please help me how to delete the above commands and what are the command that i have to place.

Pix Version:

Cisco PIX Firewall Version 6.3(4)

dhananjoy chowdhury — Thu, 17 Jul 2008 16:39:21 GMT

Hi, these are the commands yo need

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ host cisco

aaa authentication http console TACACS+ local

aaa authentication ssh console TACACS+ local

aaa authentication telnet console TACACS+ local

Also create a local admin user =

username admin password admin privilege 15

Now, to delete the old code, if you have not done "write mem" then a reboot will do.

or else you will have to follow the procedure given in this link :

chaitu_kranthi — Sat, 19 Jul 2008 01:13:44 GMT

Hi,

i can able to login to the device using local username & password. i.e. telnet iam able to login.ssh is not allowing me.

now tell me how can remove the previous commands with out rebooting the device.

dhananjoy chowdhury — Sat, 19 Jul 2008 08:56:13 GMT

Hi,

try these

no aaa-server TACACS+ protocol tacacs+

no aaa-server RADIUS protocol radius

chaitu_kranthi — Thu, 24 Jul 2008 21:43:45 GMT

still in same position