RE: PIX OS 6.3(3) and AAA Configuration

Here's the Cisco doc that covers all of what you need to do...
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configura
tion_guide_chapter09186a00800eb72e.html#wp1077358

And if I remember right, you can use the user ID "pix" and the enable
password to get in when the TACACS+ server is down. 

-----Original Message-----
From: Paul Spicer [mailto:paul.spicer@citec.com.au] 
Sent: Tuesday, September 28, 2004 10:18 PM
To: firewalls@securityfocus.com
Subject: PIX OS 6.3(3) and AAA Configuration

Am trying to configure/test PIX 515 Firewall to use AAA, I have
configured this to use a TACACS server, which works fine on
authenication and authorization. 

The only problem is that it would seem is that I cannot login on the
console and use the local enable password when I have configured to use
TACACS server for telnet/ssh, as telnet/ssh requires the authentication
and authorization enable password to be configured on the TACACS server,
this is no good if the network connection is down, no access to the PIX
via console. Any help would be appriciated.

regards
Paul.