ASA 5520 failover exec mate command

From: Fabian Pucciarelli <fabiangp_at_gmail.com>
Date: Thu, 12 Aug 2010 11:35:28 -0600

Hi experts,
   I have 2 asa 5520 configured on failover mode and authentication tacacs,
I cannot find a way to execute commands on the standby unit using my tacacs
login. For example

DURHAM(config)# failover exec mate sh ver
Fallback authorization. Username 'enable_1' not in LOCAL database

Is there a way to change this behavior so commands sent from the active unit
to the standby units are executed under a different username? The only way
I've found to make this work is add the enable_1 user to my local database.

Thank you

Fabian

Blogs and organic groups at http://www.ccie.net
Received on Thu Aug 12 2010 - 11:35:28 ART

This archive was generated by hypermail 2.2.0 : Wed Sep 01 2010 - 11:20:52 ART