Password on the ASA5505 console port?

[Eric Hansen]

Is it possible to password the console port on a ASA5505 so anyone plugging into it doesnt even get the > prompt without supplying a password? Kind of like putting a password on "line con 0" in IOS.

I have a bunch of these 5505's I am sending out to teleworkers and I dont want them messing with it.

Also is it possible to kill the USB ports?

much thanks.

e-

[Collin Clark · Accepted solution]

You can configure AAA locally (if you're not using a AAA server already) and use the following command to have the console port use AAA.

aaa authentication serial console LOCAL

or

aaa authentication serial console TACACS+ LOCAL (if you're using remote AAA)

I don't know of a way to disable USB, but I'll check around.

Hope that helps.

[Eric Hansen]

it does, thanks.

any idea on those usb ports? I dont trust users to plug in whatever may fit.

[Collin Clark]

I can't find anything on disabling it. You could try contacting your local SE and see if he knows. Next time I see ours , I'll try and remember to ask. You could always try electrical tape over the port!