topic Re: command authorization issue in Network Access Control

command authorization issue

kyoung77 — Sun, 10 Mar 2019 23:40:53 GMT

Have been able to restrict access to certain interfaces through command authorization but when I try to allow access to shutdown or no shutdown arguments ACS report "unknown command" in logs and command auth fails. If it is an error with syntax log reports "command denied" so I don't think that's the problem. Am I adding argument to the correct command, for instance:

Ethernet -> permit shutdown

Any suggestions?

Re: command authorization issue

Jatin Katyal — Thu, 10 Sep 2009 13:24:55 GMT

Hi,

This is what you need to define under shell command authorization

Unmatched command >> Permit unmatched arg

no -- Permit shutdown

shutdown -- Permit

NOTE: Do not check permit Unmatched args for above args.

HTH

Regards

Re: command authorization issue

kyoung77 — Thu, 10 Sep 2009 13:48:34 GMT

Worked like a charm!

Thanks!