topic Re: ASDM Read Only User in Network Security

ASDM Read Only User

NeWGuy1109 — Fri, 08 Nov 2019 17:03:08 GMT

Hello,

I am trying to create Read Only User in ASDM but while trying to set ASDM Defined Roles via Device MAnagement > AAA Access > Authorization , I am getting the following error :

Specified command more not found in mode 'exec'

It is a multi context ASA , does ASDM defined roles doesnt work in Multi Context ASA ?

Re: ASDM Read Only User

Francesco Molino — Mon, 11 Nov 2019 04:22:55 GMT

Hi

Yes you can configure privileges in a multi context environment.
Can you please share what config are you trying to apply?

Re: ASDM Read Only User

NeWGuy1109 — Mon, 11 Nov 2019 05:48:11 GMT

thanks for the reply... i am trying to enable ASDM defined roles via
Device Management > AAA Access > Authorization but getting the following error :

Specified command more not found in mode 'exec'

This works perfectly fine in a non context ASA .. but this error is thrown out when i am trying to enable it in a multi context environment

Re: ASDM Read Only User

Francesco Molino — Tue, 12 Nov 2019 05:25:01 GMT

It seems you're applying a command that is not supported on exec mode. Can you paste a screenshot of what you're trying to configure on asdm please?

Re: ASDM Read Only User

NeWGuy1109 — Tue, 12 Nov 2019 08:16:58 GMT

using ASDM Defined roles in AAA .. not entering any commands through cli

Re: ASDM Read Only User

Francesco Molino — Sat, 16 Nov 2019 01:04:15 GMT

Let me test it using ASDM, I usually use cli for asa configuration, specially for aaa

Re: ASDM Read Only User

NeWGuy1109 — Tue, 19 Nov 2019 10:00:16 GMT

Were you able to work this out ?
Thanks

Re: ASDM Read Only User

Francesco Molino — Wed, 20 Nov 2019 05:18:37 GMT

Not yet tested with asdm. I'll be able to do test it this weekend.
Sorry, end of the year It's always a rush where all customers want to finalize all projects.

Re: ASDM Read Only User

Francesco Molino — Sun, 24 Nov 2019 19:12:51 GMT

I've tested and understand your issue.

You're getting the following issue:

Never configured any aaa level from ASDM and what I see is ASDM will try to push same commands no matter if you are in single or multiple context.

However, the command more doesn't exists in multiple mode within context:

asa/admin# more?
ERROR: % Unrecognized command

Re: ASDM Read Only User

NeWGuy1109 — Mon, 25 Nov 2019 14:27:02 GMT

Yes ..thts correct.. how can i do this via CLI ?

Re: ASDM Read Only User

Francesco Molino — Tue, 26 Nov 2019 05:10:12 GMT

When you don't configuration using asdm, it pushes few commands starting with privileges (you can actually select the option on asdm preferences to have a preview of commands being pushed).
However the more command specifically won't work either through cli because not supported command in the context

Re: ASDM Read Only User

NeWGuy1109 — Thu, 28 Nov 2019 11:51:52 GMT

yes understood tht part.. i have preview enabled as well and the only command its trying to push now is "more" , everything else is already pushed... so is there any way this can be done via CLI without the more command ? or it can not be achieved in context mode ?
Thanks

Re: ASDM Read Only User

Francesco Molino — Fri, 29 Nov 2019 04:12:37 GMT

Yes you can copy all the commands you're seeing in the preview pane on asdm, unappply the config from asdm, go to your cli and paste what you copied except the line privilege 5 with the more command. Then everything will work as expected.