cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1035
Views
9
Helpful
1
Replies

config commands authorization on ASA

r.spiandorello
Level 1
Level 1

Hi, is there a way to control the config commands with tacacs+ authorization ?

When I enable the configure command, in ACS shell coomand authorization set, all other config commands are enabled.

In IOS there's the "aaa authorization config-commands", how to with ASA ?

1 Reply 1

Jagdeep Gambhir
Level 10
Level 10

Please check this link that explains about command authorization on ASA.

these commands are required on ASA/PIX/FWSM in order to implement command authorization through an ACS server:

aaa-server authserver protocol tacacs+

aaa-server authserver host 10.1.1.1

aaa authorization command authserver

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Regards,

~JG

Do rate helpful posts