Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

NCM "Login Information" Enable Level

I was wondering if there is a way to specify the 'enable level' to use the 'login' command instead of 'enable'. Our ASAs require either enable password or the login method to have access in order to back-up configurations.

I can't seem to find a way to specify the actual method to use aside from 'enable' or the 'enable <level>' that is already part of that drop-down list selection.

Thanks,

- Matt

Find more posts tagged with

enable_login_credentials

Accepted answers

All comments

rschroeder

It sounds like perhaps you simply need to use "No Enable" in a test, and then review the logs to see the errors.

If you ssh to the ASA as yourself, and then enter your password, I'm assuming you're only at the > prompt, instead of the enabled # prompt. Then you type "enable" and enter a password, to get to #.

NCM will work that same way. Use RADIUS (for tracking & accountability), build an account only for NCM, and give it full admin rights. Then test by connecting via SSH using those credentials. If you go straight to the # prompt, you're good to go. If you're only at >, but can get there via the "enable" command and putting in the password (or perhaps the NCM account's password a second time), you can easily configure NCM for this.

Edit the device in NCM, and below the User name (where you'll put in your NCM account name) and password, choose the drop down for Enable, set it to Enable (instead of No Enable, or higher level rights), enter the Enable password in there, and test.

I bet you'll succeed the first time. If not, verify your Enable password in the Cisco device, and ensure your NCM is using the right name & password & enable password. The logs will show the problem.

And if all else fails, there's always the manual & Thwack . . .

Good luck!

Rick

tholemu

Due to the setup we have, we must use the login command at the ASA '>' prompt. We do not use an enable password to log in past that prompt. It appears NCM does not support the 'login' command method once you've actually entered the device.

I am unsure about whether or not there is a way to add a custom method for what they have setup as the 'enable' login. If there were a way to allo NCM to send a 'login' command followed by the exact same credentials used to initially log in to the device then our problem would be solved.

We could use an enable password but in some cases it is just easier to use the login command again.

Thanks,

Matt

rschroeder

Matt,

I back up our ASA's using the simple Enable option; you should be able to do that too. Make sure you have the correct Enable password installed on NCM, right below the Enable option. There should be no need to choose and Enable Level.

Good luck!

Rick

tholemu

All,

I understand that the 'enable' option is there. However, the reason I posted this question is because there are times when we do NOT use 'enable' to log into a device. All I need to know is whether or not there is a way to specify using the 'login' command followed by login credentials.

Thanks,

Matt