asked on

Cisco ASA - Cant logon SSH

On a Cisco ASA using ssh, I can logon with my AD account, but I cannot log on using a username I created locally on the ASA, why not?

netcmh

Do you have the

aaa authentication ssh console <AD> LOCAL

set?

tolinrome

ASKER

Yes, but I am not trying to logon with an AD account. I created a local user on the ASA and just simply want to ssh into the ASA using that local account.

netcmh

I understand, the authentication would try AD first and then the local database.

tolinrome

ASKER

Then how do I get it to login?

netcmh

Can you share your AAA & LOCAL config?

Also, is your ssh command configured to allow ssh from the particular host?

ssh <Inside host IP> <inside host netmask> inside

netcmh

Sometimes, I've found that deleting that userid and then recreating it, helps.

netcmh

I think that since the AD is always available, you would have difficulty having the Local database step up to authenticate. It's supposed to be used for the times when AD is inaccessible and you need to get into your device.

tolinrome

ASKER

ssh is allowed from the host, I have deleted and recreated the username as well. Thanks.

ASKER CERTIFIED SOLUTION

tolinrome

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

netcmh

Could you share what you mean? I'd like to know how you did it.

tolinrome