configure aaa authorization on ASA 8.0 ???

rico_hao40 · ‎11-20-2007

Hi,

I just following "http://cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#user" to configure aaa authorization on ASA, but is does not work. I can login ASA, after that, I typing any command are not accebtable 'Authorization failed". Check The ACS log says

"11/20/2007 10:55:03 Author failed enable_15 Default Group 0.0.0.0 .. 0 x.x.x.x x.x.x.x"

On ACS username is "enable_15", i do not have this user???

Any idea?

Thanks

Collin Clark · ‎11-26-2007

In ACS, under your username you will need to change "TACACS+ Enable Password" to whatever you want to use (ie Windows Domain"). Have you also created the PIX Command Authorization Sets?