AAA on PIX and FWSM

gautamzone · ‎10-02-2007

Dear All,

I am working on TACACS authentication in PIX and FWSM. I noticed that even with giving a user Privilege 15 access in Cisco ACS, i am prompted for enable password when i type en. But for switches / routers, it only prompts me for password once and directly takes me to privilege mode. But for PIX and FWSM, i am taken to user mode first.

Is this some limitation? Is there any workaround to this.

Thanks a lot

Gautam

gfullage · ‎10-02-2007

The PIX/ASA/FWSM don't currently support exec authorization, which is what gives you the ability to go straight into enable mode on routers and switches. No workaround.