Cisco ISE TACACS Command sets Regex Query

sondevi — Thu, 03 Oct 2019 06:21:56 GMT

Hi Team, Working on regex for TACACS policy command sets, having a query in command sets, needs configuration as below:

Below command sets should not be changed on global level:

conf t

(config)#address-family ipv4 unicast

config-af)#maximum prefix 5

but same command "max prefix limit" should work on vrf level.

conf t

(config)#vrf C-Edge-Technologies-10-S50

(config-vrf)# address-family ipv4 unicast

(config-vrf-af)#maximum prefix 5000 80

Need to set the global level command restriction but should be able to use same command within vrf for particular users.

Re: Cisco ISE TACACS Command sets Regex Query

Jason Kunst — Mon, 07 Oct 2019 17:24:47 GMT

i'd recommend asking in the switching community as well