topic Re: Local authorization query in Network Access Control

Local authorization query

Jonn cos — Mon, 11 Mar 2019 00:38:10 GMT

Hi all experts.

I am using ACS to provide authentication and accounting purpose. But when ACS is not reachable (tunnel is not up but WAN ip is reachable or something like that) i am able to login to remote router via local username and able to do level 15 configuration. My requirement is as follows

1) I want to create 2 username. User1 and User2. Both of them should have access to all level 15 configuration.

2) Only restriction is that, User1 should not be able to delete or create new "ip sla" objects, like he should not be allowed to perform the following configuration

ip sla 1 or ip sla monitor 1 or ip rtr

Can someone pls guide me how to do this ?

Re: Local authorization query

cadet alain — Thu, 02 Dec 2010 14:55:12 GMT

Hi,

I think easiest way to do this if your IOS supports this feature is to use role-based CLI aka views.

Regards.

Re: Local authorization query

Panos Kampanakis — Thu, 02 Dec 2010 18:41:51 GMT

A link that explains how to set it up

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtclivws.html

I hope it helps.