topic Network devices access restriction configuration with user level in Network Access Control

Network devices access restriction configuration with user level in ACS 5.0

vinodjad1234 — Mon, 11 Mar 2019 01:24:08 GMT

Hi Experts,

I have task of configuring TACAC with different user level for all routers and switches,

To elaborate more, I have engineer , analyst and site engineers so I want to configure centralized tacac authentication with different privilage levels for different categories of network engg. , analyst, site engineer,

can anybody explain about this how to proceed with ACS 5.2 and what configuration is required in device level.

I am perticularly looking for acs 5.2 configuration steps.

Looking forward to get reply.

Network devices access restriction configuration with user level

Nicolas Darchis — Wed, 14 Sep 2011 18:07:55 GMT

Assigning different privileges level to different user types is easy.

Do these privileges also vary depending on the type of device accessed ? Can you be more specific ?

What you ask seem to be just indicated in the acs 5.2 user guide, so I'm not sure if there is anything tricky in your question that I missed.

Network devices access restriction configuration with user level

vinodjad1234 — Thu, 15 Sep 2011 06:46:48 GMT

Hi Nicolas,

Thanks for your reply.

We have all distribution swithces ( L3 switch ) and later all routers ( CE routers ) to configured with tacac.

I just need steps to be followed in ACS configuration for this task .

Network devices access restriction configuration with user level

Nicolas Darchis — Thu, 15 Sep 2011 08:59:14 GMT

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/policy_mod.html#wp1076053

In "default device admin" simply create authorization rules.

They should look like "if user type/group = site engineer then assign shell profile X"

You then have to define the shell profile in policy elements and put in there all the privileges of your site engineer.

And so on for the other roles

Network devices access restriction configuration with user level

vinodjad1234 — Tue, 20 Sep 2011 06:03:35 GMT

Hi Nicolas,

Sorry for late reply.

I just read your reply and you made quite easier for me to go further and understand this.