Prev | Current Page 144 | Next

Yusuf Bhaiji

"Network Security Technologies and Solutions"

A stepby-
step setup wizard is available to configure all these tasks using the setup command. An alternative is to
configure all steps manually. Example 3-10 shows how to enable the HTTPS server and allow hosts on the
10.1.1.0/24 network from the inside interface to access ASDM.
Example 3-10. Configuring HTTPS Access for ASDM
Pix(config)# crypto key generate rsa modulus 1024
Pix(config)# write mem
Pix(config)# http server enable
Pix(config)# http 10.1.1.0 255.255.255.0 inside
The appliance allows a maximum of five concurrent ASDM instances per context, if available, with a maximum of
32 ASDM instances among all contexts.
Note
Security contexts will be discussed in detail in Chapter 6, "Cisco Firewalls: Appliance and Module."
Authenticating and Authorizing Using Local and AAA Database
The security appliance supports authentication, authorization, and accounting capabilities using the AAA servers
and a local database stored on the appliance. AAA provides an extra level of protection, scalability, and better
control for user access.
AAA services are available using TACACS+, Radius, and the local database type on the security appliance. Note
that accounting with a local database is not supported, and Radius command authorization is not supported.


Pages:
132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156