topic Command Authen - All CLI and selected Enable in Network Access Control https://community.cisco.com/t5/network-access-control/command-authen-all-cli-and-selected-enable/m-p/230813#M435055 <P>CiscoSecure ACS 3.2 - I want to give selected users:</P><P>- unlimited access to all CLI command set</P><P>- enable access but only to selected commands</P><P></P><P>I'd prefer not to have to visit each router but do want the same control if the TACACS system is unavailable</P> Sun, 10 Mar 2019 14:36:32 GMT ed.tarento 2019-03-10T14:36:32Z Command Authen - All CLI and selected Enable https://community.cisco.com/t5/network-access-control/command-authen-all-cli-and-selected-enable/m-p/230813#M435055 <P>CiscoSecure ACS 3.2 - I want to give selected users:</P><P>- unlimited access to all CLI command set</P><P>- enable access but only to selected commands</P><P></P><P>I'd prefer not to have to visit each router but do want the same control if the TACACS system is unavailable</P> Sun, 10 Mar 2019 14:36:32 GMT https://community.cisco.com/t5/network-access-control/command-authen-all-cli-and-selected-enable/m-p/230813#M435055 ed.tarento 2019-03-10T14:36:32Z Re: Command Authen - All CLI and selected Enable https://community.cisco.com/t5/network-access-control/command-authen-all-cli-and-selected-enable/m-p/230814#M435056 <HTML><HEAD></HEAD><BODY><P>The authorization command causes a request packet containing a series of AV pairs to be sent to the RADIUS or TACACS daemon as part of the authorization process. The daemon can do one of the following: </P><P></P><P>Accept the request as is. </P><P>Make changes to the request. </P><P>Refuse the request and refuse authorization. I am not sure nd it also doesn't talk about creating a request.</P></BODY></HTML> Mon, 29 Dec 2003 16:35:25 GMT https://community.cisco.com/t5/network-access-control/command-authen-all-cli-and-selected-enable/m-p/230814#M435056 smalkeric 2003-12-29T16:35:25Z