Password on the ASA5505 console port?

Answered Question
Feb 6th, 2009
User Badges:

Is it possible to password the console port on a ASA5505 so anyone plugging into it doesnt even get the > prompt without supplying a password? Kind of like putting a password on "line con 0" in IOS.


I have a bunch of these 5505's I am sending out to teleworkers and I dont want them messing with it.


Also is it possible to kill the USB ports?


much thanks.

e-

Correct Answer by Collin Clark about 8 years 1 month ago

You can configure AAA locally (if you're not using a AAA server already) and use the following command to have the console port use AAA.


aaa authentication serial console LOCAL

or

aaa authentication serial console TACACS+ LOCAL (if you're using remote AAA)


I don't know of a way to disable USB, but I'll check around.


Hope that helps.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Collin Clark Fri, 02/06/2009 - 09:40
User Badges:
  • Purple, 4500 points or more

You can configure AAA locally (if you're not using a AAA server already) and use the following command to have the console port use AAA.


aaa authentication serial console LOCAL

or

aaa authentication serial console TACACS+ LOCAL (if you're using remote AAA)


I don't know of a way to disable USB, but I'll check around.


Hope that helps.

Eric Hansen Fri, 02/06/2009 - 09:41
User Badges:

it does, thanks.


any idea on those usb ports? I dont trust users to plug in whatever may fit.

Collin Clark Fri, 02/06/2009 - 11:35
User Badges:
  • Purple, 4500 points or more

I can't find anything on disabling it. You could try contacting your local SE and see if he knows. Next time I see ours , I'll try and remember to ask. You could always try electrical tape over the port!

Actions

This Discussion