topic Re: ASA local database authentication in Network Access Control

ASA local database authentication

saiiven07 — Fri, 21 Feb 2020 18:18:48 GMT

Hi, all

The problem is that I want to configure a local database on the ASA in order to authenticate WebVPN users, but it looks like ASA is using the same database for authenticating users for SSH access. Is there any way to define which users are going to be authenticated only for WebVPN and not for SSH?

Re: ASA local database authentication

saiiven07 — Thu, 09 Aug 2007 09:32:15 GMT

I thought it could be done under "username testuser attributes" command, but it seems there is no such an option.

Re: ASA local database authentication

Anand Narayana — Mon, 13 Aug 2007 04:34:57 GMT

even i had the same problem, let i had come to know that user will need to authentication via the users created locally for logging in to the device, in such case, i would advice you to login via TACACS, that would be really helpful to track the users who ever logs in via VPN.

Re: ASA local database authentication

saiiven07 — Mon, 13 Aug 2007 18:23:59 GMT

Actually, I don't want to use TACACS+ for user authentication, because there's going to be only 7-10 WebVPN users, so deploying TACACS+ server doesn't make any sense. But I was really surprised when I found that there's no any possibility to determine which users are only for WebVPN access and which are only for SSH access.