Why do I start at privilege level 1 when logging into a Cisco ASA 5510?

Posted by Alain O'Dea on Server Fault See other posts from Server Fault or by Alain O'Dea
Published on 2011-11-14T13:45:35Z Indexed on 2011/11/28 10:02 UTC
Read the original article Hit count: 792

Filed under:
|
|

I have created a test user that is set to privilege 15 in the config:

username test password **************** encrypted privilege 15

When I log in to the ASA 5510 I am in privilege 1 according to sh curpriv:

login as: test
[email protected]'s password:
Type help or '?' for a list of available commands.
asa> sh curpriv
Username : test
Current privilege level : 1
Current Mode/s : P_UNPR

Attempting enable fails even though I know I have the correct enable password:

asa> en
Password: *************************
Password: *************************
Password: *************************
Access denied.

Logging in from unprivileged puts me on privilege 15 and I can do as a please:

asa> login
Username : test
Pasword: *************************
asa> sh curpriv
Current privilege level : 15
Current Mode/s : P_PRIV
asa> 

The only thing I can track this to is a configuration change I made where I removed a VPN user we no longer needed.

Why do I start at privilege level 1 when logging into a Cisco ASA 5510?

© Server Fault or respective owner

Related posts about cisco

Related posts about cisco-asa