Problem Accessing FWSM From Switch Console

Unanswered Question
Jul 30th, 2007

Hi,

I have a 6509 with FWSM in module 4. FWSM is configured in single context mode. After I configured passwords and authentication on the FWSM, I can no longer access the module using "session slot 4 processor 1" when connecting to the 6509 switch via console. Please note that if I ssh to 6509 then I can get to FWSM successfully.

Obviously I can remove authentication config to resolve the issue for now but I need to keep them in the final configuration and cannot figure out how they would cause the above issue to find a workaround ...

My Authentication config:

*******************************************

enable password ew9KHLwZJ3Ih2ff5 encrypted

passwd GQwTW2VuxBDYJJlK encrypted

username admin nopassword privilege 15

aaa authentication ssh console TACACS+ LOCAL

aaa authentication http console TACACS+ LOCAL

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ (management) host x.x.x.x

timeout 5

key xxxxx

http server enable

http x.x.x.x 255.255.255.255 management

ssh x.x.x.x 255.255.255.255 management

telnet timeout 5

ssh timeout 5

console timeout 0

*******************************************

Thanks in advance for your help ...

Ali

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Anonymous (not verified) Fri, 08/03/2007 - 05:58

The test aaa-server command lets you verify that the FWSM can authenticate users with a particular AAA server, and for legacy VPN authorization, if you can authorize a user. This command lets you test the AAA server without having an actual user who attempts to authenticate or authorize. It also helps you isolate whether AAA failures are due to misconfiguration of AAA server parameters, a connection problem to the AAA server, or other configuration errors on the FWSM.

Actions

This Discussion