topic Re: Read only Account on ASA in Network Security

Read only Account on ASA

jagadishbabu_thota — Mon, 11 Mar 2019 13:23:13 GMT

I have 2 ASA's where I have to create a read-only account for an user to monitor sessions on the ASAs. The read-only account should only have permission to use ASDM and click on the Monitor tab? I donot use an AAA server at present. How can I do it? Helpful posts will be rated. Thanks in Advance.

Re: Read only Account on ASA

Farrukh Haroon — Thu, 31 Jul 2008 09:22:16 GMT

Have a look at this:

http://www.cisco.com/en/US/docs/security/asa/asa72/asdm52/user/guide/devaccss.html#wp1218050

I'm assuming this works via the privilege command and no external AAA servers are required.

Regards

Farrukh

Re: Read only Account on ASA

jagadishbabu_thota — Fri, 01 Aug 2008 07:26:13 GMT

Thanks. I have rated the reply.

Re: Read only Account on ASA

Farrukh Haroon — Fri, 01 Aug 2008 09:01:19 GMT

Thanks, let me know how it goes.

Regards

Farrukh

Re: Read only Account on ASA

jagadishbabu_thota — Tue, 12 Aug 2008 11:37:26 GMT

User complained that he is having the following error "You donot have sufficient priviliges to execute commands required to load ASDM. Please contact your System Administrator." on one ASA and looks like it works on other ASA. What might be the problem.

Thanks in Advance

Re: Read only Account on ASA

robertson.michael — Tue, 12 Aug 2008 21:20:42 GMT

Hi,

Can you post the configuration changes that you made to try to get this working? You should only need to create a privilege level 5 user and configure ASDM to use the local user database:

ASA(config)# username user1 password password123 priv 5

ASA(config)# aaa authentication http console LOCAL

-Mike