RADIUS account not working for backups in PIX/ASA

Question

Hi,

We are using RADIUS for user authentication for all of our network devices comprising mainly of Cisco routers/switches and PIX/ASA firewalls. We have set up an account specially for KiwiCatTools in RADIUS to take backups of the device configs.

The account works well for routers/switches but for PIX/ASA it gives an error log while logging in, "Enable mode failed"

I logged into the firewalls using the Kiwi account and it logs in but it doesn't go into enable mode automatically. It just logs-in in the user mode ('>' prompt)

My own personal account in RADIUS, logs me in directly into the enable mode in the devices.

On the switches, the same account goes into enable mode ('#' prompt) thereby successfully taking backups of switch/router configs. Is there a specific setting which needs to be enabled for PIX/ASA?

christineb · Answer

Hi StarB - could you make sure that you don't have a  ‘privilege level’ field in the Passwords tab of the device setup with any value? If you do, please try removing the value (clear out the field) and see if that works.

If that isn't the case, I'd suggest opening a support ticket so we can get diagnostics and sort out this problem for you.

--Christine

StarB · Answer

Thanks for your reply.

I went through that link and I checked my device properties. The privilege level 15 is not mentioned in my device properties.

christineb · Answer

Hi StarB - did you check out this thwack post to see if it could help?