Help with commands on ASA (RADIUS and AAA)

[isaiahhavoc]

I'm doing a project where I have a Winradius server on two inside servers, with the two test accounts:
Username: User1 Password: examplepw

Username: User2 Password: examplepw2

Trying to figure out the commands needed on the ASA for the following things I'm trying to accomplish, I keep getting errors:

1) ASA 1 from POD1 should talk toPOD 1 inside server which is running WinRadius. ASA 2 fromPOD 2 should talk to POD 2 inside server which is also running WinRadius.

2) Configure the ASA to talk to the WinRadius server for authentication purposes for SSH sessions.

3) Configure SSH for inside access. Use a domain name of cisco.com.

4) Add a local user to each ASA just in case you get locked out. Create a username of user and a password of cisco in each ASA just in case.

Add the necessary commands on each ASA to talk to the WinRadius 

[balaji.bandi]

A couple of questions, is this ASA are part of HA ? or they are working as standalone?

Not sure what version of ASA code you running here :

So in General, ASA  working RADIUS config guide as below for reference :

https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/aaa_radius.html#17790

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/aaa-radius.html

[Georg Pauwen]

Hello,

have a look at the commands below:

ASA 1

To configure local username and password

username admin password cisco privilege 15

SSH Access

ASA1(config)#domain-name cisco.com
ASA1(config)#enable password sshaccess
ASA1(config)#username sshadmin password sshpassword
ASA1(config)#aaa authentication ssh console LOCAL
ASA1(config)#crypto key generate rsa modulus 1024
ASA1(config)#ssh allowed_ip_address inside

RADIUS

aaa-server tag protocol radius
aaa-server POD1 outside host ip_address_radius_server

ASA 2

To configure local username and password

username admin password cisco privilege 15

SSH Access

ASA2(config)#domain-name cisco.com
ASA2(config)#enable password sshaccess
ASA2(config)#username sshadmin password sshpassword
ASA2(config)#aaa authentication ssh console LOCAL
ASA2(config)#crypto key generate rsa modulus 1024
ASA2(config)#ssh allowed_ip_address inside

RADIUS

aaa-server tag protocol radius
aaa-server POD2 outside host ip_address_radius_server