Direct enable access to PIX

[akin_lopez]

Hi guys,

Just implemented cisco ACS 4.0 in my network and I didn't have any problems with routers and switches. but when it came to PIX firewalls, i realised i couldn't log on directly to priviledge mode. i had to go there manually. this is possible on routers and switches. you log on directly to enable mode.

is this possible on the pix or i just want too much from it.

[nefkensp]

This is possible, both using AAA and the Cisco ACS server as well as local authentication.

With local authentication you can give a user a privilege level, resulting in access in enable mode.

For Cisco ACS configuration,

if you give the command:

aaa authentication enable console

it tells the pix to require aaa server authentication to enter privileged mode. The enable option promtps the username and password before entering privileged mode for serial, telnet and ssh connections.

Hope this helps you a bit