SSH to ASA 5500 into privileged exec mode without "enable"

[Frank Anstoetz]

Is there a way to configure a ASA 5500 firewall so that when i access the firewall via SSH, my user is in privileged exec mode immediately after i have entered the login credentials? So no need to enter "enable" anymore. I know how to do that with a router but couldn't figure it out for the ASA. Any ideas?

Thanks & best regards

Frank.

[padatta]

Being a security device, this feature is not available on ASA/PIX. Unlike in IOS, using AAA we cannot go directly to privileged exec mode.

Paps

[Frank Anstoetz]

Thanks for the info, paps!

Cheers F.

[oschaul2]

That is not correct. You can do the following:

conf t

username cisco password cEYEsc00 privilege 15

aaa authorization exec LOCAL auto-enable

exit

This will get you into enable mode when you ssh to it.

[Gerardo Marciales]

Thanks, you are right.

On the other hand, I am looking how to chance the default port 22 to a different value on an ASA. I always do it on IOS, but I couldn't find it for ASA so far.

Best.