Telnet session authentication

[ChrisAC]

Could anyone help me with this?

I want to enable user authentication when logging in via telnet to a PIX, without using an authentication server. We do this on routers using the following commands:

aaa new-model
aaa authentication login word local
aaa authentication login CONSOLE none
enable secret 5 $1$BpB3$VFMzrF1i5PJAKM8Mu.nH8.

This prompts for a username and password that is authenticated on the router. It's better than just using a line vty 0 4 password.

I want to do a similar thing with a PIX 506, only I can't figure out how to.

The manual for the PIX says that you can use the "aaa authentication telnet console" command. You then use pix as the user name and the enable password to gain telnet access, only it's not working!

pix# conf t
pix(config)# aaa authentication telnet console
Type help or '?' for a list of available commands.
pix(config)#

I can't seem to figure this one out!

Any ideas?

Chris.


************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************

 

[berford]

Chris,

What version of PIX OS are you using?

Liberty for All,

Brian