Authorize-only command missing

[mamckenn]

hi,

The 'authorize-only' command is missing from my 5505 running 9.1(7)23, on a base license:

Under

ciscoasa(config-aaa-server-group)#

there is no authorize-only command, and according to the documentationt there should be:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/aaa-radius.html.

Any ideas appreciated.

[Rob Ingram · Accepted solution]

Hi,
The doc you reference is for 9.2 and you are on 9.1(7)23. I assume it's a new feature introduced in 9.2. The latest firmware version supported on the ASA 5505 is 9.2.4 (although it's not marked as a suggested version). Perhaps you could upgrade to 9.2 to get this command?

[mamckenn]

Yes that worked.. strange that such an old version is still Recommended

[amikat · Accepted solution]

Hi,

The "authorize-only" command was introduced with the 9.2(1) release.

Best regards,

Antonin

[mamckenn]

Thanks Antonin, it’s working now