10-10-2009 04:42 AM - edited 02-21-2020 03:43 AM
Hello Champs,
I am using PIX-506E version 6.3(5)
In order to do a scheduled config download, my script is hard coded to login
with a user name and password and execute the show running command. However, since i have enable password configured, I am unable to exectue the show running from the user mode.
My question is I can create a different username & password, but the criteria is that it should go to the priviledge mode directly. Since my script is hard coded, i am unable to modify it. Below is the AAA commands for your reference. Any help is highly appreciated. Thanks in advance
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
aaa authentication ssh console LOCAL
aaa authorization command LOCAL
Regards,
Manoj
10-10-2009 12:12 PM
try
username <
10-13-2009 04:18 AM
Hi Manoj,
ASA/PIX/FWSM does not support AAA Exec
Authorization functionality yet, so it cannot be configured with TACACS or
RADIUS to jump directly to privilege exec mode. you need to go through with enable authentication mode.
username: xxxx
password:xxxx
>enable
password:
HTH
JK
Plz rate helpful posts-
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide