Using Attributes in Command Sets

blittrell — Mon, 11 Mar 2019 04:00:51 GMT

Hi All,

This is probably pretty far fetched but in an effort to centralizing and controlling access to network devices I have the desire to inject user attributes into ACS 5.2 command sets. For instance, to allow a user to manage their own vlan and setting that vlan number up in their AD userid as an extended attribute.

Any ideas if you can inject an attribute into the command sets? If so what is the syntax?

Thanks

Using Attributes in Command Sets

Jatin Katyal — Sun, 27 Oct 2013 09:25:07 GMT

In command set you can only allow/deny command and argument for a user or group. I don't see any option to inject any additional attribute. I guess if you want a user to access a command like "interface vlan" and parameters inside it that can be done.

~BR
Jatin Katyal

**Do rate helpful posts**

topic Using Attributes in Command Sets in Network Access Control

Using Attributes in Command Sets

Using Attributes in Command Sets