Cisco ASA Series Cli Configuration Manual page 874

Configuring AAA
Command
Step 3
username username attributes
Example:
hostname(config)# username exampleuser1
attributes
Step 4
service-type {admin | nas-prompt | remote-access}
Example:
hostname(config-username)# service-type admin
Examples
The following example assigns a privilege level of 15 to the admin user account:
hostname(config)# username admin password password privilege 15
The following example creates a user account with no password:
hostname(config)# username user34 nopassword
The following example enables management authorization, creates a user account with a password,
enters username attributes configuration mode, and specifies the service-type attribute:
hostname(config)# aaa authorization exec authentication-server
hostname(config)# username user1 password gOgeOus
hostname(config)# username user1 attributes
hostname(config-username)# service-type nas-prompt
Cisco ASA Series CLI Configuration Guide
1-28
Chapter 1 Configuring AAA Servers and the Local Database
Purpose
(Optional) Configures username attributes. The
username argument is the username that you created in
Step 1.
(Optional) Configures the user level if you configured
management authorization in
keyword allows full access to any services specified by
the aaa authentication console LOCAL commands.
The admin keyword is the default.
The nas-prompt keyword allows access to the CLI when
you configure the aaa authentication {telnet | ssh |
serial} console LOCAL command, but denies ASDM
configuration access if you configure the aaa
authentication http console LOCAL command.
ASDM monitoring access is allowed. If you enable
authentication with the aaa authentication enable
console LOCAL command, the user cannot access
privileged EXEC mode using the enable command (or
the login command).
The remote-access keyword denies management access.
The user cannot use any services specified by the aaa
authentication console LOCAL commands (excluding
the serial keyword; serial access is allowed).
(Optional) If you are using this username for VPN
authentication, you can configure many VPN attributes
for the user. For more information, see the
Attributes for Individual Users" section on page
Step 2. The admin
"Configuring
1-89.