32-23
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 32 Configuring Management Access
Configuring AAA for System Administrators
Step 1 To enable accounting of users when they enter the enable command:
a. Go to Configuration > Device Management > Users/AAA > AAA Access > Accounting, and check
the Require accounting to allow accounting of user activity > Enable check box.
b. From the Server Group drop-down list, choose a RADIUS or TACACS+ server group name.
Step 2 To enable accounting of users when they access the adaptive security appliance using Telnet, SSH, or
the serial console:
a. Under the Require accounting for the following types of connections area, check the check boxes
for Serial, SSH, and/or Telnet.
b. For each connection type, from the Server Group drop-down list, choose a RADIUS or TACACS+
server group name.
Step 3 To configure command accounting:
a. Under the Require command accounting area, check Enable.
b. From the Server Group drop-down list, choose a TACACS+ server group name. RADIUS is not
supported.
You can send accounting messages to the TACACS+ accounting server when you enter any
command other than show commands at the CLI.
c. If you customize the command privilege level using the Command Privilege Setup dialog box (see
the “Assigning Privilege Levels to Commands and Enabling Authorization” section on page 32-17),
you can limit which commands the adaptive security appliance accounts for by specifying a
minimum privilege level in the Privilege level drop-down list. The adaptive security appliance does
not account for commands that are below the minimum privilege level.
Step 4 Click Apply.
Viewing the Current Logged-In User
To view the current logged-in user, enter the following command in Tools > Command Line Interface:
show curpriv
See the following sample show curpriv command output. A description of each field follows.
show curpriv
Username : admin
Current privilege level : 15
Current Mode/s : P_PRIV
Table 32-1 describes the show curpriv command output.
Table 32-1 show curpriv Command Output Description
Field Description
Username Username. If you are logged in as the default user, the name is enable_1 (user
EXEC) or enable_15 (privileged EXEC).
To Next Page
Loading...
Need help?
General
