topic Cisco ACS access restriction in Network Access Control

Cisco ACS access restriction

Sreejith.S — Fri, 06 Sep 2019 07:50:39 GMT

We are running ACS 5.8 in the environment . We have a requirement to restrict access to one specific user group (part of single identity group) to RO access to all devices . How can i write an access policy to achieve ? Do we have specific shell profile & command sets to restrict access ..

Re: Cisco ACS access restriction

ssambourg — Fri, 06 Sep 2019 09:05:13 GMT

Hi,

You will need to affect shell privilege and command set in result profile linked to a condition that match your identity group.

Did you try this : https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html

HTH