Console enable with PIX authentication/authorization?

[lbhoang]

I'm running ACS 3.2(3) and have PIX 520 configured for authentication (telnet and SSH) and authorization. Enable in telnet and ssh works fine but when I attempt to go into enable through console I get the following message:

pix> enable

Command authorization failed

It doesn't seem to matter if I have serial (console) authentication enabled or not:

aaa authentication serial console ACS

How do you get into PIX enable mode through console?

Thank you

[umedryk]

Are you using TACACS authentication for the user connecting to the PIX? In order for command authorization to work properly, TACACS authentication needs to be configured on the PIX.

Also, here is the detailed procedure explained for the command authorization on Pix : http://www.cisco.com/warp/public/110/pix_command.shtml