TACACS+ is not working on PIX Firewall

[chaitu_kranthi]

Hi,

Recently we installed the Cisco ACS 4.2 ver in our network and we are adding the network devices to it. now all the network devices are working with TACACS+ id's except the secuirty device like pix firewalls

existing pix configuration...

Cisco PIX Firewall Version 6.3(4)

Cisco PIX Device Manager Version 3.0(2)

aaa-server TACACS+ protocol tacacs+

aaa-server TACACS+ max-failed-attempts 3

aaa-server TACACS+ deadtime 10

aaa-server TACACS+ (inside) host x.x.x.x test timeout 10

some one pls help me in this.

[dhananjoy chowdhury]

Hi,

Did you enable it for telnet / ssh/http access authentication ?

aaa authentication telnet console TACACS+

aaa authentication ssh console TACACS+

[Jagdeep Gambhir]

Here are the commands to need,

PIX ( CODE 6.3.4 )

username Test password cisco

username Test privilege 15

aaa-server TACACS protocol tacacs+

aaa-server TACACS (outside) host 10.130.102.191 cisco timeout 10

aaa authentication http console TACACS LOCAL

aaa authentication ssh console TACACS LOCAL

aaa authentication telnet console TACACS LOCAL

aaa authentication enable console TACACS LOCAL

If you don't need SSH,HTTP then no need to use it.

Regards,

~JG

Do rate helpful posts