cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3212
Views
0
Helpful
2
Replies

Enable login local in ASA 5520

pablo.arcelcr
Level 1
Level 1

How do I enable login local credentials in ASA for Console?

Also what modification should I need to perform to enable ssh conectivity?

2 Accepted Solutions

Accepted Solutions

Hi Pablo,

Local credential, example:

username Cisco password ASA123

*It will be encrypted automatically. 

These links can be useful

http://www.essenz.com/resources/2014/11/05/enabling-ssh-access-on-cisco-asa/

https://www.youtube.com/watch?v=lzirL0mnurA

Remember to include your IP address on the SSH line. Example:

ssh 192.168.100.25  255.255.255.255 INSIDE




>> Marcar como útil o contestado, si la respuesta resolvió la duda, esto ayuda a futuras consultas de otros miembros de la comunidad. <<

View solution in original post

For enabling SSH, I wrote a document some time ago:

https://supportforums.cisco.com/document/12338141/guide-better-ssh-security

On the ASA, after configuring the usernames you still have to enable the local authentication:

ASA5520/sec/act(config)# aaa authentication ?
configure mode commands/options:
enable Enable
http HTTP
serial Serial
ssh SSH
...
ASA5520/sec/act(config)# aaa authentication serial console ?
configure mode commands/options:
LOCAL Predefined server tag for AAA protocol 'local'
WORD Name of RADIUS or TACACS+ aaa-server group for administrative authentication
ASA5520/sec/act(config)# aaa authentication serial console LOCAL

View solution in original post

2 Replies 2

Hi Pablo,

Local credential, example:

username Cisco password ASA123

*It will be encrypted automatically. 

These links can be useful

http://www.essenz.com/resources/2014/11/05/enabling-ssh-access-on-cisco-asa/

https://www.youtube.com/watch?v=lzirL0mnurA

Remember to include your IP address on the SSH line. Example:

ssh 192.168.100.25  255.255.255.255 INSIDE




>> Marcar como útil o contestado, si la respuesta resolvió la duda, esto ayuda a futuras consultas de otros miembros de la comunidad. <<

For enabling SSH, I wrote a document some time ago:

https://supportforums.cisco.com/document/12338141/guide-better-ssh-security

On the ASA, after configuring the usernames you still have to enable the local authentication:

ASA5520/sec/act(config)# aaa authentication ?
configure mode commands/options:
enable Enable
http HTTP
serial Serial
ssh SSH
...
ASA5520/sec/act(config)# aaa authentication serial console ?
configure mode commands/options:
LOCAL Predefined server tag for AAA protocol 'local'
WORD Name of RADIUS or TACACS+ aaa-server group for administrative authentication
ASA5520/sec/act(config)# aaa authentication serial console LOCAL
Review Cisco Networking for a $25 gift card