Ok. I have Cisco Security Manager, Cisco MARS, LMS and VMS in my network. Now, the requirement is something like this:

Everyone (including CSM) accessing devices like firewalls, routers, switchces, IPS Sensors should be authenticated by the ACS.

But when I went throught the CSM documentation I understood that the best way for CSM to logon to the firewall is by a local user.

Hence I an looking for a mechanism for the CSM only to bypass the AAA authentication while the network administrators being authenticated by the AAA.

Regards,

Rishikesh Khedkar

What we did was create a local user account in ACS. That way the user account is still AAA'd and you can set the password to no expiry, limit the access, etc.

HTH

Thanks,

Regards,

Rishikesh Khedkar