topic PIX CONSOLE PORT SAFE ACCESS in Network Security

PIX CONSOLE PORT SAFE ACCESS

p.bender — Fri, 21 Feb 2020 06:29:00 GMT

I have got the following symptom during the configuration of a PIX525 using the port console with the emulator 'Hyper Terminal' :

First : no password protection

Second : when you disconnect from the port console and come back later, you have direct access on the screen you leave before you disconnect : NO SESSION TIMEOUT.

This could be dangerous when your active session was in 'enable mode'.

Any help to secure the console port access will be welcome.

Re: PIX CONSOLE PORT SAFE ACCESS

mpalardy — Fri, 10 Jan 2003 19:17:19 GMT

use the following command:

aaa authentication serial console TACACS+

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/a.htm#xtocid2

Michael

Re: PIX CONSOLE PORT SAFE ACCESS

p.bender — Tue, 14 Jan 2003 20:44:34 GMT

Thanks .

But , actually, my customer don't use a TACACS server .

Re: PIX CONSOLE PORT SAFE ACCESS

rrbleeker — Wed, 15 Jan 2003 17:49:16 GMT

In version 6.1 you can use a local database for console access. You have to enter a username/password setting and indicate that you want to use the local database to authenticate console access:

username xxxxx password yyyyyy privilege zz (1-15)

aaa authentication serial console LOCAL