topic Re: ACS shell command authorization help in Network Access Control

ACS shell command authorization help

emmawuxp06 — Sun, 10 Mar 2019 22:54:14 GMT

Hello,

I wanted to only allow users to use interface command. But when I permit config terminal in ACS shell command set, all the commands are allowed. How can I limited the users to only have the permission for interfacce command?

Thanks

Re: ACS shell command authorization help

royalblues — Thu, 12 Jun 2008 14:20:16 GMT

Did you configure something like

configure permit terminal

interface permit fastethernet

HAve a look at the attached doc for shell command auth configuration

Narayan

Re: ACS shell command authorization help

Farrukh Haroon — Thu, 12 Jun 2008 14:22:21 GMT

Two things could be wrong

1) You don't have the following command on your AAA Client:

aaa authorization config-commands

2) You have clicked the 'Unmatched Commands' = Permit radio option in ACS, have a look at:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Regards

Farrukh

Re: ACS shell command authorization help

emmawuxp06 — Thu, 12 Jun 2008 14:42:37 GMT

yes, i missed the command - aaa authorization config-commands on the clients. After i added that, it works.

Thanks for your help