RE: PIX OS 6.3(3) and AAA Configuration

Paul,

Your AAA needs look something like this:

aaa authentication login default group tacacs+ enable
aaa authentication enable default group tacacs+ enable

The first line says my default login mode uses tacacs as a primary and the
local enable password as a fall back.

The second line says my default enable password uses tacacs as a primary and
the local enable password as a fall back.

James Williams, GISF
Network Systems Technician
West Texas A&M University

-----Original Message-----
From: Paul Spicer [mailto:paul.spicer@citec.com.au] 
Sent: Tuesday, September 28, 2004 10:18 PM
To: firewalls@securityfocus.com
Subject: PIX OS 6.3(3) and AAA Configuration

Am trying to configure/test PIX 515 Firewall to use AAA, I have
configured this to use a TACACS server, which works fine on
authenication and authorization. 

The only problem is that it would seem is that I cannot login on the
console and use the local enable password when I have configured to use
TACACS server for telnet/ssh, as telnet/ssh requires the authentication
and authorization enable password to be configured on the TACACS server,
this is no good if the network connection is down, no access to the PIX
via console. Any help would be appriciated.

regards
Paul.