topic Re: restrict aaa access using command authorization windows acs3 in Network Access Control https://community.cisco.com/t5/network-access-control/restrict-aaa-access-using-command-authorization-windows-acs3-6/m-p/515153#M427701 <HTML><HEAD></HEAD><BODY><P>On the router there's a:</P><P><B></B></P><P>aaa authorization config-commands</P><P></P><P>command, make sure you have that in. You then have to set up command authorization on the TACACS server to allow "interface permit any", "shutdown" and "no shutdown" commands.</P></BODY></HTML> Thu, 23 Feb 2006 00:03:51 GMT gfullage 2006-02-23T00:03:51Z restrict aaa access using command authorization windows acs3.6 https://community.cisco.com/t5/network-access-control/restrict-aaa-access-using-command-authorization-windows-acs3-6/m-p/515152#M427699 <P>i need to enable aaa users to shut and unshut interfaces but nothing else. i already have all the users and groups setup but when i modify the command auth set to include "configure" "permit term" they are given unrestricted access.</P><P></P><P>any help appreciated</P> Sun, 10 Mar 2019 21:29:05 GMT https://community.cisco.com/t5/network-access-control/restrict-aaa-access-using-command-authorization-windows-acs3-6/m-p/515152#M427699 lstrauch 2019-03-10T21:29:05Z Re: restrict aaa access using command authorization windows acs3 https://community.cisco.com/t5/network-access-control/restrict-aaa-access-using-command-authorization-windows-acs3-6/m-p/515153#M427701 <HTML><HEAD></HEAD><BODY><P>On the router there's a:</P><P><B></B></P><P>aaa authorization config-commands</P><P></P><P>command, make sure you have that in. You then have to set up command authorization on the TACACS server to allow "interface permit any", "shutdown" and "no shutdown" commands.</P></BODY></HTML> Thu, 23 Feb 2006 00:03:51 GMT https://community.cisco.com/t5/network-access-control/restrict-aaa-access-using-command-authorization-windows-acs3-6/m-p/515153#M427701 gfullage 2006-02-23T00:03:51Z