Cisco Systems ASA5515K9 Network Router User Manual


  Open as PDF
of 1994
 
37-13
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 37 Configuring Management Access
Configuring AAA for System Administrators
IPv6 Guidelines
Supports IPv6.
Additional Guidelines
You can define only one management access interface.
Configuring a Management Interface
To configure the management interface, enter the following command:
Configuring AAA for System Administrators
This section describes how to enable authentication and command authorization for system
administrators. Before you configure AAA for system administrators, first configure the local database
or AAA server according to procedures listed in Chapter 35, “Configuring AAA Servers and the Local
Database.”
This section includes the following topics:
Information About AAA for System Administrators, page 37-14
Licensing Requirements for AAA for System Administrators, page 37-17
Prerequisites, page 37-17
Guidelines and Limitations, page 37-18
Default Settings, page 37-18
Configuring Authentication for CLI and ASDM Access, page 37-19
Configuring Authentication to Access Privileged EXEC Mode (the enable Command), page 37-19
Limiting User CLI and ASDM Access with Management Authorization, page 37-21
Configuring Command Authorization, page 37-22
Configuring Management Access Accounting, page 37-30
Viewing the Currently Logged-In User, page 37-30
Recovering from a Lockout, page 37-31
Setting a Management Session Quota, page 37-32
Command Purpose
management access management_interface
Example:
hostname(config)# management access inside
The management_interface specifies the name of the management
interface that you want to access when entering the ASA from another
interface.