ASA console access via tacacs+

aconticisco — Wed, 28 Oct 2020 15:34:49 GMT

Hi,

aaa authentication for ssh/serial/console is set to tacacs and then local

aaa authorization command set to tacacs and then local

aaa authorization exec auth-server auto-enable

aaa accounting enable/serial/ssh set to tacacs-server

When logging in via SSH with tacacs available it goes straight to Priv Exec Mode

However via console when I enter same tacacs user/pass it goes in User Exec Mode and then if I type enable or login I get user/pass prompt but neither same tacacs one nor local ASA user one is accepted.

What is the difference between SSH and console and why I do not see the same behaviour (directly logged in to Priv Exec Mode) when tacacs server is available?

Thanks

Re: ASA console access via tacacs+

Aref Alsouqi — Wed, 28 Oct 2020 17:41:36 GMT

I'm not a 100% sure, but I think the auto-enable command does not apply to console accesses.

topic Re: ASA console access via tacacs+ in Network Security

ASA console access via tacacs+

Re: ASA console access via tacacs+