firewall and ACS

[siribat]

I've configured firewall to use ACS but the firewall locks me ou when the ACS is nt available

my question is is there any command i hae to configure on the firewal to be able to get to it when the ACS is unavailable

another question is I cannot run firewall on pixshel command it waill authenticate but fail to authorize Im running version 3.3(4)

thanks in advance

[manishkbohra]

Try to configure AAA on firewall through PDM becasue it will be easy for you and you will find an option that first preference will be TACACS+ and other option will be LOCAL,what will happen is first it will try for ACS server if not available it will authenticate with username configured in pix local database. Also create a local user with maximum privilege in pix so that authentication is successful. This will solve your problem.

As per my knowledge you cannot run pixsshell with current PIX IOS version 6.3 it may support in future IOS release.