04-19-2013 09:48 PM - edited 03-11-2019 06:32 PM
Hi Everyone.
Need to know when i console in to ASA it puts me directly to hostname with > prompt.
When i type enable it ask for user name and password.
Need to know what config should i look for ASA that will provide access to enable with user name and password?
Thanks
Mahesh
Solved! Go to Solution.
04-19-2013 09:54 PM
Hi,
It would seem to me that currently you are getting to the ASA> prompt because no separate authentication configuration is set for the Console connection.
Now you also say that you get prompted for username/password when you issue the command "enable"
This means you have some configuration similiar to this
aaa authentication enable console LOCAL
Keyword above being "enable". DONT let the word "console" fool you. Its part of each this sort of AAA configuration.
You can use the command
show run aaa
To see all the AAA configurations for the ASA
For example the output from my home ASA
ASA(config)# sh run aaa
aaa authentication http console LOCAL
aaa authentication telnet console LOCAL
aaa authentication ssh console LOCAL
As you can see I have configure LOCAL database authentication for telnet, ssh and http(ASDM) management connections
Hope this helps
- Jouni
04-19-2013 10:20 PM
Just to add,
If you want to have username/password authentication directly on the Console connection then you would have to use
aaa authentication serial console LOCAL
- Jouni
04-19-2013 09:54 PM
Hi,
It would seem to me that currently you are getting to the ASA> prompt because no separate authentication configuration is set for the Console connection.
Now you also say that you get prompted for username/password when you issue the command "enable"
This means you have some configuration similiar to this
aaa authentication enable console LOCAL
Keyword above being "enable". DONT let the word "console" fool you. Its part of each this sort of AAA configuration.
You can use the command
show run aaa
To see all the AAA configurations for the ASA
For example the output from my home ASA
ASA(config)# sh run aaa
aaa authentication http console LOCAL
aaa authentication telnet console LOCAL
aaa authentication ssh console LOCAL
As you can see I have configure LOCAL database authentication for telnet, ssh and http(ASDM) management connections
Hope this helps
- Jouni
04-19-2013 10:00 PM
Hi Jouni,
You were spot on.
aaa authentication enable console LOCAL did the job.
Regards
MAhesh
04-19-2013 10:20 PM
Just to add,
If you want to have username/password authentication directly on the Console connection then you would have to use
aaa authentication serial console LOCAL
- Jouni
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide