topic Re: PRIVILEGE COMMAND in Network Access Control

PRIVILEGE COMMAND

delahais — Sun, 10 Mar 2019 23:21:22 GMT

I would want to give all privilege in configuration mode except one command : "no router eigrp" : How to write this ?

privilege exec level 15 no router

????

thx

Re: PRIVILEGE COMMAND

Ivan Martinon — Sat, 28 Feb 2009 02:37:42 GMT

I think this would not be able to be accomplished like that, honestly your best shot is using command authorization, this as long as you have an ACS server and you have defined tacacs protocol, I did a quick test on dynagen trying to move the command router to level 14 and then moving the command "no router" to level 15 but that action moves the whole router command to level 15. just my 2 cents

Re: PRIVILEGE COMMAND

aneelaka — Fri, 06 Mar 2009 22:41:07 GMT

Best way to approach this is to use a TACACS server and command authorization, You can deny the router eigrp in the user or group level

Re: PRIVILEGE COMMAND

sahmedshahcsd — Sat, 07 Mar 2009 10:29:53 GMT

Using ACS server you can enable command authorization as denied for the command "router eigrp" on a group or user level basis.

HTH

Ahmed

Re: PRIVILEGE COMMAND

delahais — Wed, 11 Mar 2009 13:45:54 GMT

Thx to everybody for your feedbacks