Setting up AAA on PIX515e

[hornbeck]

Trying to set up AAA on the PIX515e so I assign accounts with different privilege levels for access. I used aaa-model on my routers and it worked fine. I am stuck here. Any advice or direction is greatly welcome! TIA, Gary /

[sebastan_bach]

hi gary could u tell me what u are trying to do. i can easily help u out.

set the aaa authentication serial console LOCAL

aaa authorisation command LOAL

create the uses with respective privilege levels.

then with the privilege commands se the commands.

we have show commands ,clear commands and the actual commands eg:access-list

see in pix we can see the show commands at the exec mode as well as the configure mode as well. similarly allowing the clear commadn make sure the user is not allowed to execute the clear configure command. cause then he can overwrite all ur configuration.

tell me ur requirements i can help u out.

regards

sebastan

[hornbeck]

Thank your for your time. I am new to creating accounts with AAA. I simple want to have staff log into this firewall with their name and password. We have presently been using priviledge account for everything.

TIA,

Gary

[Fernando_Meza]

Hi try the below commands .. NOTE; this will use the local database on the PIX and so you need to cerate the username and passwords on the PIX itself. You could also use a radius server if you like.

aaa-server LOCAL protocol local

aaa authentication http console LOCAL

aaa authentication ssh console LOCAL

aaa authorization command LOCAL

username user password **** privilege

I hope it helps ... please rate it if it does !!!

[hornbeck]

Thank you very much. I am trying to set up our PIX515e to accept ssh connections with individual user accounts....

TIA,

Gary

[Fernando_Meza]

yes ... so this should work as long as you open access to yur PIX by ssh ..

ssh ip_address [netmask] [interface_name]

where ip_address is the Ip address(s) allowed to connect

Interface_name is the interface they can connect to i.e inside

I hope it helps .. please rate it if it does !!!