Feature history for management access – Cisco ASA 5505 User Manual

Page 773

Advertising
background image

37-33

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 37 Configuring Management Access

Feature History for Management Access

Feature History for Management Access

Table 37-3

lists each feature change and the platform release in which it was implemented.

Table 37-3

Feature History for Management Access

Feature Name

Platform
Releases

Feature Information

Management Access

7.0(1)

We introduced this feature.

We introduced the following commands:

show running-config all privilege all, show
running-config privilege level, show running-config
privilege command, telnet, telnet timeout, ssh, ssh
timeout, , http, http server enable, asdm image disk,
banner, console timeout, icmp, ipv6 icmp, management
access, aaa authentication console, aaa authentication
enable console, aaa authentication telnet | ssh console,
service-type, login, privilege, aaa authentication exec
authentication-server, aaa authentication command
LOCAL,aaa accounting serial | telnet | ssh | enable
console, show curpriv, aaa accounting command
privilege

Increased SSH security; the SSH default
username is no longer supported.

8.4(2)

Starting in 8.4(2), you can no longer connect to the ASA
using SSH with the pix or asa username and the login
password. To use SSH, you must configure AAA
authentication using the aaa authentication ssh console
LOCAL
command (CLI) or Configuration > Device
Management > Users/AAA > AAA Access >
Authentication (ASDM); then define a local user by
entering the username command (CLI) or choosing
Configuration > Device Management > Users/AAA > User
Accounts (ASDM). If you want to use a AAA server for
authentication instead of the local database, we recommend
also configuring local authentication as a backup method.

Common Criteria certification and FIPS support
for maximum number of management sessions
allowed and Diffie-Hellman Key Exchange
Group 14 support for SSH.

8.4(4.1)

The maximum number of simultaneous ASDM, SSH, and
Telnet sessions allowed was added. Support for
Diffie-Hellman Key Exchange Group 14 for SSH was
added.

We introduced or modified the following commands: quota
management-session
, show running-config quota
management-session
, show quota management-session,
ssh.

Advertising