PIX 515 not using enable password

Posted on 2009-04-17
Last Modified: 2012-05-06
I have a cisco pix 515 e that doesn't take the enable password. Instead it takes the user's password for both login and enable. I've deleted and re-added the enable password and changed the user from privilege 15 but no change. I've searched but can't find any related pages online.
Any ideas?
Question by:cavacamite
    LVL 43

    Accepted Solution

    Most likely becuase you have this in your config.

    aaa authentication enable console LOCAL

    This specifies to use LOCAL auth (username/password) for enable access.

    If you want to use LOCAL (username/password) for telnet/ssh/http but use the configured enable password to enter enable mode instead of LOCAL, use the following config.

    aaa authentication ssh console LOCAL
    aaa authentication telnet console LOCAL
    aaa authentication http console LOCAL
    no aaa authentication enable console LOCAL     <--remove this line from your config

    Make sure you know the enable password on the PIX or change it to something new if you are unsure so you don't lock yourself out.

    enable pass <newpassword>

    Author Closing Comment

    Thank you very much. You've completely resolved the issue.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
    From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now