topic ASA User Privileges in Network Security

ASA User Privileges

Gordon Ross — Tue, 12 Mar 2019 03:26:05 GMT

I'm running 9.1.4 on an ASA 5540.

I'm trying to setup a seperate privilege level so my rancid system can login and get the configuration, but can't actually change anything. I've put the following commands into the ASA config:

aaa authorization command LOCAL

username rancid password ... encrypted privilege 4

privilege show level 4 mode exec command running-config

privilege show level 4 mode exec command curpriv

But when I login as user rancid, I get no "show" command available to me.

What have I done wrong?

Thanks,

GTG

ASA User Privileges

Collin Clark — Tue, 07 Jan 2014 18:41:55 GMT

GTG-

Are you in exec mode? Have you tried a show run even though it doesn't show up?

ASA User Privileges

Gordon Ross — Tue, 07 Jan 2014 18:58:53 GMT

Type help or '?' for a list of available commands.

asa-1/act>

asa-1/act> show run

ERROR: % Invalid input detected at '^' marker.

ERROR: Command authorization failed

asa-1/act> show curpriv

ERROR: % Invalid input detected at '^' marker.

asa-1/act>

😞

ASA User Privileges

Collin Clark — Tue, 07 Jan 2014 20:06:04 GMT

Can you add an enable password to level 4-

enable password R@nCiDPaSsW0rD level 4

Once rancid logs in, can you type enable 4 and see if the commands work?

ASA User Privileges

Gordon Ross — Tue, 07 Jan 2014 22:30:05 GMT

That works a treat.

Just to tell rancid to only try level 4.

Thanks,

GTG