Command Authorization Issue

jain.nitin — Mon, 11 Mar 2019 00:45:17 GMT

Hi There, I am trying to setup command authorization in ACS 4.2.1.15 but its partially working.

I have setup three sets of shell command ... full access is working fine. another one is read only which is causing problem. in this command set I have allowed show commands and clear commands....everything is working fine but users can execute Write command from # prompt and they can also execute copy running-config startup-config....

I have define command set as below:

clear permit arp

show permit interface

permit version

permit port-security

i hav selected unmatched command as deny and unmatched argument as deny.

I dont know why its happening. am i missing something.

Please help...

Re: Command Authorization Issue

Javier Henderson — Sun, 30 Jan 2011 18:33:21 GMT

Can you post the AAA configuration on the router? Did you configure command authorization on it?

topic Command Authorization Issue in Network Access Control

Command Authorization Issue

Re: Command Authorization Issue