
9-10
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Chapter 9 Accessing and Monitoring PIX Firewall
Configuring PIX Firewall Banners
This website provides a downloadable file with instructions for using it to remove the lines in the
PIX Firewall configuration that enable authentication and cause the lockout problem.
You can encounter a different type of lockout problem if you use the aaa authorization command
tacacs_server_tag command and you are not logged as the correct user. For every command you type,
the PIX
Firewall will display the following message:
Command Authorization failed
This occurs because the TACACS+ server does not have a user profile for the user account that you used
for logging in. To prevent this problem, make sure that the TACACS+ server has all the users configured
with the commands that they can execute. Also make sure that you are logged in as a user with the
required profile on the TACACS+ server.
Configuring PIX Firewall Banners
PIX Firewall Version 6.3 introduces support for “Message-of-the-Day” (MOTD), EXEC, and login
banners, similar to the same feature in Cisco IOS software. The size of banners is only limited by
available system memory or Flash memory.
To configure a banner, enter the following command:
banner {exec|login|motd} text
Replace text with the string that you want the system to display. Spaces are allowed but tabs cannot be
entered using the CLI. You can dynamically add the host name or domain name of the PIX
Firewall by
including the strings $(hostname) and $(domain) in the string.
Use the exec option to display a banner before the enable prompt is displayed. Use the login option to
display the banner before the password login prompt when accessing the PIX
Firewall using Telnet. Use
the motd option to display a message-of-the-day banner.
To configure a banner including multiple lines, enter the banner command once for each line in the
banner.
To display the current banner, enter the following command:
show banner {exec|login|motd}
To remove a specific banner, enter the following command:
no banner {exec|login|motd}
To clear all banners, enter the following command:
clear banner
Using Network Time Protocol
This section describes how to use the NTP client, introduced with PIX Firewall Version 6.2. It includes
the following topics:
• Overview, page 9-11
• Enabling NTP, page 9-11
• Viewing NTP Status and Configuration, page 9-12
Commentaires sur ces manuels