PIX CONSOLE PORT SAFE ACCESS

[p.bender]

I have got the following symptom during the configuration of a PIX525 using the port console with the emulator 'Hyper Terminal' :

First : no password protection

Second : when you disconnect from the port console and come back later, you have direct access on the screen you leave before you disconnect : NO SESSION TIMEOUT.

This could be dangerous when your active session was in 'enable mode'.

Any help to secure the console port access will be welcome.

[mpalardy]

use the following command:

aaa authentication serial console TACACS+

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/a.htm#xtocid2

Michael

[p.bender]

Thanks .

But , actually, my customer don't use a TACACS server .

[rrbleeker]

In version 6.1 you can use a local database for console access. You have to enter a username/password setting and indicate that you want to use the local database to authenticate console access:

username xxxxx password yyyyyy privilege zz (1-15)

aaa authentication serial console LOCAL