PIX aaa authentication enable console TACACS+

[wso]

I have configured the authentication method for PIX 515 firewall. I can pass the authentication process when I use "telnet" login. After that, I try to enter the privilege mode with "enable" command. The system prompt me for the password (no username prompt), then I enter the password, which same with the user "$enab15$" of the TACACS+ server. But the authentication failed. Please advice.

PIX device :-

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ (inside) host 10.1.1.1 cisco timeout 5

aaa authentication telnet console TACACS+

aaa authentication enable console TACACS+

[a-vazquez]

It's a known bug aaa authentication does not work with enable password.

[mtumarinson]

Are you talking about bug#CSCdy64251 that was introduced in 6.2(2). Do you know if that bug still exist as 6.3(3)

[mhoda]

Hi,

This bug is fixed in PIX 6.3(3) code. But, what you are experiencing can be ressolved by defining enable password in the same user profile as telnet. If you are using ACS Windows, you may need to turn on Advance tacacs+ option under the Interface configuraytion, and then configure the enable password in the userprofile. I would suggest to upgrade to 6.3.3 code for AAA. Thanks,

Mynul