topic Re: PIX authorization in Network Access Control

PIX authorization

bgrove2913 — Sun, 10 Mar 2019 21:08:55 GMT

I have following configured on the PIX:

user user1 password cisco1 privilege 1

user user15 password cisco15 privilege 15

aaa authentication telnet console LOCAL

aaa authorization command LOCAL

I used both user1 and user15 login(via telnet), there's no difference between these 2 users in term of privilege level.

Is this the correct way to do authorization on PIX? I would like to let some users to only be able to look at the ocnfigurations, and let other users to be able to change the configuration. How can I do that?

Thanks

Re: PIX authorization

didyap — Fri, 13 May 2005 18:42:16 GMT

Follow these steps to configure Telnet console access:

Authentication Steps For Local Usernames

(config)# username user1 password cisco1 privilege 15

(config)# aaa-server LOCAL protocol local

(config)# aaa authentication telnet console LOCAL

Re: PIX authorization

bgrove2913 — Fri, 13 May 2005 23:23:24 GMT

I have no problem with Authentication. My question is how to configure the authorization on PIX. It seems the local authorization doesn't work.