• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1124
  • Last Modified:

setup AAA account in pix 525

hi
i have pix 525 and i want to setup username and password for telnet ,console,https,enable
now i have username and password for telnet and for enable
first question how i can change password for enable and telnet
if i wnat to remove old username and password for enable and telnet how i can do that

now i want to use AAA in local account in pix
is this command true
pix(config)#username home password pixhome
pix(config)#aaa authentication telnet console local
pix(config)#aaa authentication ssh console local
pix(config)#aaa authentication http console local
pix(config)#aaa authentication enable console local
pix(config)#aaa authentication serial console local
pix(config)#aaa local authentication attempts max-fail 5

i want to made this user administrator
if i wnat to made user can only enter to enable mode and only show some command in this mode how i can do that and how i can prevent him from enter to config mode
must i use privilege command for each command in each mode
best regards
0
nasemabdullaa
Asked:
nasemabdullaa
1 Solution
 
Alan Huseyin KayahanCommented:
  Hi nasemabdullaa
        For removing the username and password, simply type
        no username home password pixhome
       Users have privilege levels from 15 to 1. 15 is the full administrator, and 1 is the most restricted. For example
      username admin password admin priv 15     ------> full rights
      username guest password guest priv 1       ------->most restricted user

   you can use 14 13 12.....2 1 if you like, functionality gets restricted towards lowest level

Regards
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now