07-20-2017 04:28 PM - edited 03-05-2019 08:52 AM
How do I enable login local credentials in ASA for Console?
Also what modification should I need to perform to enable ssh conectivity?
Solved! Go to Solution.
07-20-2017 04:47 PM
Hi Pablo,
Local credential, example:
username Cisco password ASA123
*It will be encrypted automatically.
These links can be useful
http://www.essenz.com/resources/2014/11/05/enabling-ssh-access-on-cisco-asa/
https://www.youtube.com/watch?v=lzirL0mnurA
Remember to include your IP address on the SSH line. Example:
ssh 192.168.100.25 255.255.255.255 INSIDE
07-20-2017 11:46 PM
For enabling SSH, I wrote a document some time ago:
https://supportforums.cisco.com/document/12338141/guide-better-ssh-security
On the ASA, after configuring the usernames you still have to enable the local authentication:
ASA5520/sec/act(config)# aaa authentication ?
configure mode commands/options:
enable Enable
http HTTP
serial Serial
ssh SSH
...
ASA5520/sec/act(config)# aaa authentication serial console ?
configure mode commands/options:
LOCAL Predefined server tag for AAA protocol 'local'
WORD Name of RADIUS or TACACS+ aaa-server group for administrative authentication
ASA5520/sec/act(config)# aaa authentication serial console LOCAL
07-20-2017 04:47 PM
Hi Pablo,
Local credential, example:
username Cisco password ASA123
*It will be encrypted automatically.
These links can be useful
http://www.essenz.com/resources/2014/11/05/enabling-ssh-access-on-cisco-asa/
https://www.youtube.com/watch?v=lzirL0mnurA
Remember to include your IP address on the SSH line. Example:
ssh 192.168.100.25 255.255.255.255 INSIDE
07-20-2017 11:46 PM
For enabling SSH, I wrote a document some time ago:
https://supportforums.cisco.com/document/12338141/guide-better-ssh-security
On the ASA, after configuring the usernames you still have to enable the local authentication:
ASA5520/sec/act(config)# aaa authentication ?
configure mode commands/options:
enable Enable
http HTTP
serial Serial
ssh SSH
...
ASA5520/sec/act(config)# aaa authentication serial console ?
configure mode commands/options:
LOCAL Predefined server tag for AAA protocol 'local'
WORD Name of RADIUS or TACACS+ aaa-server group for administrative authentication
ASA5520/sec/act(config)# aaa authentication serial console LOCAL
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide