Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 306)

9-4

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 9 Accessing and Monitoring PIX Firewall

Command Authorization and LOCAL User Authentication

For example, the following command assigns a privilege level of 15 to the user account admin.

username admin password passw0rd privilege 15

If no privilege level is specified, the user account is created with a privilege level of 2. You can define

as many user accounts as you need.

Use the following command to create a user account with no password:

username username nopassword

Replace username with the user account that you want to create without a password.

To delete an existing user account, enter the following command:

no username username

Replace username with the user account that you want to delete. For example, the following command

deletes the user account admin.

no username admin

To remove all the entries from the user database, enter the following command:

clear username

User Authentication Using the LOCAL Database

User authentication can be completed using the LOCAL database after user accounts are created in this

database.

To enable authentication using the LOCAL database, enter the following command:

pix(config)# aaa authentication serial|telnet|ssh|http|enable console LOCAL

After entering this command, the LOCAL user accounts are used for authentication.

You can also use the login command, as follows, to access the PIX Firewall with a particular username

and password:

pix> login

The login command only checks the local database while authenticating a user and does not check any

authentication or authorization (AAA) server.

When you enter the login command, the system prompts for a username and password as follows:

Username:admin

Password:********

Note Users with a privilege level greater than or equal to 2 have access to the enable and configuration modes

and the PIX Firewall prompt changes to #. Users with the privilege level 0 or 1 see the prompt >.

Use the following command to log out from the currently logged in user account:

logout

1 2 ... 301 302 303 304 305 306 307 308 309 310 311 ... 465 466

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 306