ASA privileges 15 authentication trow ACS

[asidko]

Hi.

When I log in via ssh/telnet to an ASA configured with

aaa-server ACS-Servers protocol radius
aaa-server ACS-Servers (outside) host xxx.xxx.xxx.xxx

I do not get privilege level 15 as I should. I have to execute the "enable" command explicitly. Then the prompt changes and privileged commands work.

On IOS routers this works as expected, ie. the ssh login directly gives me a privileged prompt.

Am I doing something wrong? Is that a known bug/feature?

 

[bannomust]

Are you doing the login authentication via the ACS or it's used the default internal database on ASA? if you are using ACS and enable the authorization on ASA then you need to configured it on ACS. If you are loggedin via local ASA database then give the privialge 15 to user which you areusing in SSH login.

Thanks,
Mustafa Gangardiwala

Mustafa Gangardiwala
CCIE-Security # 16253, CISA
CISM,CISSP,INFOSEC, MCSE, CNE

http://netseczone.blogspot.com