AAA configuration on Cisco ASA firewall

[garjenaresh]

Could someone please let me know the commands to configure AAA on Cisco ASA Firewall also on ASA Firewall module.

Bit urgent.

Thanks,

[chris noon]

This link should have all the information you need.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/access_aaa.html

[chris noon]

A quick example of this would be (taken from previously mentioned PDF):

Configure Radius Group:

aaa-server AuthOutbound protocol radius
exit.
aaa-server AuthOutbound (inside) host [IP address]
key RadUauthKey
exit

Adding a radius server to a group:

aaa-server svrgrp1 protocol radius
aaa-server svrgrp1 host [Radius address]
radius-common-pw myexaplepasswordabc123
mschapv2-capable
timeout 9
retry-interval 7
accounting-mode simultaneous
authentication-port 1650
authorization-port 1645
key mysecretkeyexampleiceage2
exit

Apply Radius login to SSH:

aaa authentication login {default | list-name} group tacacs+ enable none