topic ASA enable password is still local when enabling radius server via SSH in Network Security

ASA enable password is still local when enabling radius server via SSH

faghouri83 — Mon, 24 Jun 2024 17:11:58 GMT

Hi I enabled radius authentication via the asdm to our nps server. The username and password works however when prompting for the password again for enable mode, it gives me an error. I then have to use the old local enable password to get into the mode. Is there an easy way to fix this in the asdm so that the same password allows you to get into enable mode too?

Thanks

Re: ASA enable password is still local when enabling radius server via

MHM Cisco World — Mon, 24 Jun 2024 17:14:31 GMT

Can I see the confi of aaa server in asa

MHM

Re: ASA enable password is still local when enabling radius server via

balaji.bandi — Tue, 25 Jun 2024 07:13:14 GMT

Make sure the user in Priv 15 mode - check below guide :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/117641-config-asa-00.html#anc6

Re: ASA enable password is still local when enabling radius server via

faghouri83 — Tue, 25 Jun 2024 14:42:20 GMT

aaa-server NPS_Servers (inside) host 10.171.xx.27
key *****
aaa-server NPS_Servers (inside) host 10.171.xx.28
key *****
user-identity default-domain LOCAL
aaa authentication ssh console NPS_Servers LOCAL
aaa authentication login-history

Balaji the NPS server works for other devices on the network including other asa firewalls.

Re: ASA enable password is still local when enabling radius server via

MHM Cisco World — Tue, 25 Jun 2024 14:51:06 GMT

Debug aaa comm 10

Check if the aaa send anything to aaa server when you try to access asa.

It can the asa dont any connection to aaa and use local and if that correct then you need to specify privilege 15.

But let check aaa first

MHM

Re: ASA enable password is still local when enabling radius server via

balaji.bandi — Wed, 26 Jun 2024 05:57:21 GMT

Balaji the NPS server works for other devices on the network including other asa firewalls.

If this is the only firewall not working, i would compare working vs not working config.