topic Re: AAA enable authentication on ASA 5500 in Network Access Control

AAA enable authentication on ASA 5500

ddavenport-dcc — Sun, 10 Mar 2019 22:31:39 GMT

I'm hoping I've missed something basic here. I have an ASA5520 (V7.0(7)) I have enabled (I think) enable authentication with the following command:

aaa authentication enable console tacacs LOCAL

I can authentication to CLI ok with my ACS username/password but when I go to privilege exec mode using enable command I am prompted for a password rather that username/password. No matter what I enter I get access denied. I can login using the login command and authenticate via the local database so I am not locked out but I was wondering what I am doing wrong. Probably something simple but any help would be appreciated - Thanks

Re: AAA enable authentication on ASA 5500

Jagdeep Gambhir — Sat, 24 Nov 2007 13:51:56 GMT

It seems that on acs you have not selected enable password.

ACS--->User setup---->Tacacs+ enable password. Use any option as per your need.

And try to login now.

Regards,

~JG

Re: AAA enable authentication on ASA 5500

ddavenport-dcc — Mon, 26 Nov 2007 06:21:11 GMT

Thanks for your reply. I have already set the enable password option is ACS.

Regards

Dave

Re: AAA enable authentication on ASA 5500

mm7138395 — Tue, 19 Feb 2008 13:25:21 GMT

Does this have to be set on a per user basis or can it be set in the group settings?

Re: AAA enable authentication on ASA 5500

Jagdeep Gambhir — Tue, 19 Feb 2008 14:05:16 GMT

On user basis as this option is not there in group settings.

Regards,

~JG

Do rate helpful posts