Configuring a management interface, Configuring aaa for system administrators – Cisco ASA 5505 User Manual

Page 753

Advertising
background image

37-13

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 37 Configuring Management Access

Configuring AAA for System Administrators

IPv6 Guidelines

Supports IPv6.

Additional Guidelines

You can define only one management access interface.

Configuring a Management Interface

To configure the management interface, enter the following command:

Configuring AAA for System Administrators

This section describes how to enable authentication and command authorization for system
administrators. Before you configure AAA for system administrators, first configure the local database
or AAA server according to procedures listed in

Chapter 35, “Configuring AAA Servers and the Local

Database.”

This section includes the following topics:

Information About AAA for System Administrators, page 37-14

Licensing Requirements for AAA for System Administrators, page 37-17

Prerequisites, page 37-17

Guidelines and Limitations, page 37-18

Default Settings, page 37-18

Configuring Authentication for CLI and ASDM Access, page 37-19

Configuring Authentication to Access Privileged EXEC Mode (the enable Command), page 37-19

Limiting User CLI and ASDM Access with Management Authorization, page 37-21

Configuring Command Authorization, page 37-22

Configuring Management Access Accounting, page 37-30

Viewing the Currently Logged-In User, page 37-30

Recovering from a Lockout, page 37-31

Setting a Management Session Quota, page 37-32

Command

Purpose

management access

management_interface

Example:

hostname(config)# management access inside

The management_interface specifies the name of the management
interface that you want to access when entering the ASA from another
interface.

Advertising