topic Hi John, in Network Access Control

ACS | Disabling command in

John — Mon, 11 Mar 2019 07:27:44 GMT

We would like to inquire if possible to restrict the access of our site IT, to prevent them changing the port that are already in siwtchport mode trunk, and also prevent them to shutdown.

configure terminal

show

interface

shutdown

exit

end

copy

enable

traceroute

switchport

clear port-security

Hi John,

Raymond Zwarts — Tue, 14 Feb 2017 10:57:16 GMT

Hi John,

You can do thois through Policy > Authorization. Create the relevant conditions and apply them there.

You will want to configure

Javier Henderson — Wed, 15 Feb 2017 16:13:50 GMT

You will want to configure command authorization on the router (switch, etc.) and then create a command authorization set on ACS, and apply it to an authorization policy.