06-12-2007 03:10 PM - edited 03-10-2019 03:12 PM
I have AAA authenication working on our PIX and Switches with a backend Cisco ACS server. I'm able to login via Cisco Radius in enable mode on the Cat switches. Problem I have is I'm not sure of what is required to go right into enable mode on the Pix's/ASA's so that I don't have to type in the enable password when logging into the PIX. Here is my command I use on the Switches which automatically puts me into enable mode when I login successfully with Cisco ACS Radius LDAP authenication.
aaa new-model
!
aaa authentication login CiscoACS group radius local
!
aaa authorization exec CiscoACS group radius local if-authenticated
!
line vty 0 15
authorization exec CiscoACS
login authentication CiscoACS
Does anyone know what is the command I can use that would allow me to get authorization exec on a PIX or ASA 5505?