topic Shell Command(session) Authorization in ACS 4.2 in Network Access Control https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189694#M137324 <HTML><HEAD></HEAD><BODY><P>Bruce:<BR />If you are running Cisco IOS then yes it is possible.</P><P>AFAIK the MSFC runs on 5600&nbsp; hardware and that runs IOS so I think it is possible for you</P><P></P><P>look into this example</P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml">http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml</A></P><P></P><P>please rate if useful and let us know if you got any problem with the configuration.</P><P></P><P>Regards,</P><P></P><P>Amjad</P><P></P><P><SPAN style="color: blue;">Rating useful replies is more useful than saying <SPAN style="color: green;"> "<SPAN style="text-decoration: underline;">Thank you</SPAN>"</SPAN></SPAN></P></BODY></HTML> Mon, 22 Apr 2013 06:25:14 GMT Amjad Abdullah 2013-04-22T06:25:14Z Shell Command(session) Authorization in ACS 4.2 https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189693#M137323 <P>Hi, All~</P><P></P><P>Our customer is using ACS 4.2.</P><P></P><P>They would like to restriction shell command(<SPAN style="color: #ff0000;"><STRONG>session</STRONG></SPAN>) in ACS 4.2.</P><P></P><P></P><P>For examples,</P><P></P><P>MSFC =&gt; <SPAN style="color: #ff0000;"><STRONG>'session slot [slot #] processor [processor #]</STRONG></SPAN>' =&gt; <SPAN style="font-size: 12pt; text-decoration: underline;">Command authorization failed.</SPAN></P><P></P><P>Is this possible to deny for shell 'session' command?</P><P></P><P>Have a nice weekend.</P><P></P><P>Thanks.</P><P></P><P></P><P>Bruce Lee</P> Mon, 11 Mar 2019 03:20:25 GMT https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189693#M137323 superjini75 2019-03-11T03:20:25Z Shell Command(session) Authorization in ACS 4.2 https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189694#M137324 <HTML><HEAD></HEAD><BODY><P>Bruce:<BR />If you are running Cisco IOS then yes it is possible.</P><P>AFAIK the MSFC runs on 5600&nbsp; hardware and that runs IOS so I think it is possible for you</P><P></P><P>look into this example</P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml">http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml</A></P><P></P><P>please rate if useful and let us know if you got any problem with the configuration.</P><P></P><P>Regards,</P><P></P><P>Amjad</P><P></P><P><SPAN style="color: blue;">Rating useful replies is more useful than saying <SPAN style="color: green;"> "<SPAN style="text-decoration: underline;">Thank you</SPAN>"</SPAN></SPAN></P></BODY></HTML> Mon, 22 Apr 2013 06:25:14 GMT https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189694#M137324 Amjad Abdullah 2013-04-22T06:25:14Z Shell Command(session) Authorization in ACS 4.2 https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189695#M137325 <HTML><HEAD></HEAD><BODY><P>Could you please duplicate the problem and attach/paste the output of </P><P></P><P>debug tacacs</P><P>debug aaa authorization</P><P></P><P></P><P>Jatin Katyal <BR />- Do rate helpful posts -</P></BODY></HTML> Mon, 22 Apr 2013 12:27:25 GMT https://community.cisco.com/t5/network-access-control/shell-command-session-authorization-in-acs-4-2/m-p/2189695#M137325 Jatin Katyal 2013-04-22T12:27:25Z