topic Re: ACS 5.1 Shell Profiles in Network Access Control

ACS 5.1 Shell Profiles

snarayanaraju — Mon, 11 Mar 2019 00:26:42 GMT

Dear Friends,

I need your help in clarifying the conceptual doubt. I am not able to understand the difference between the following in ACS 5.1

Shell Profiles

Command Sets

I found this under POLICY ELEMENTS > AUTHORIZATION & PERMISSION > DEVICE ADMINISTRATION >

Please clarify the difference between these 2 elements and how it is used

regards,

SAIRAM

Re: ACS 5.1 Shell Profiles

jrabinow — Mon, 27 Sep 2010 05:10:41 GMT

Using TACACS+ there are permissions that are defined when the se

ssion is authorized and can also be per command level authorization.

When the session is authorized (user logs in to a device) the permissions defined in the shell profile are applied; this includes items such as the privelege level

When the user enter commands at the device and performs per-command authorization, the command sets are applied

Re: ACS 5.1 Shell Profiles

snarayanaraju — Mon, 27 Sep 2010 06:30:14 GMT

Hi,

Thanks for your time and sharing this valuable stuff. But i still not able to differentiate this.

If you can spend some more time, would you please explain this with example. Like when a user login to device when the "shell profile" is used and when the "command sets" is used.

Also, in which scenario "shell profile" is used and in which case ""command sets" are used.

I googled enough and tired

regards,

SAIRAM