topic Re: ACS Shell Command Authorizations Set in Network Access Control

ACS Shell Command Authorizations Set

Pabloosorio — Sun, 10 Mar 2019 23:14:15 GMT

I have Cisco ACS Server V4.0

In the shell Command Authorization Set I configure a restrict Access.

In the privilege mode the restriction of the commands works good, but when I enter in the config prompt the restriction don't works. In this promt I can enter all commands.

Why This?

Re: ACS Shell Command Authorizations Set

Collin Clark — Mon, 15 Dec 2008 14:14:12 GMT

It's probably misconfigured somewhere.

Re: ACS Shell Command Authorizations Set

wilnil123 — Mon, 29 Dec 2008 19:36:31 GMT

I have the same error with ACS Server 4.2. I can restrict in privilege mode but global config is wide open. Also any command i block in privilege mode can still be executed in global config using the "do" command. How do i block that, or find out what commands the router is sending to the ACS.

Re: ACS Shell Command Authorizations Set

Jagdeep Gambhir — Mon, 29 Dec 2008 20:23:47 GMT

Hi All,

Please paste the aaa commands and also make sure you have this command

" aaa authorization config-commands"

Regards,

~JG