topic Re: ISE TACACS command authorization question in Network Access Control

ISE TACACS command authorization question

Richard Dumag — Fri, 21 Feb 2020 18:47:17 GMT

Hello,,

I would like to allow entry level admins to be able to configure all switch access interfaces/ports. What is the command? I've tried different commands but to no avail. Below are what I have tried so far but do not work. Any assistance is appreciated. Thanks.

permit configure interface all

permit configure interface GigabitEthernet all

permit configure interface .*

permit configure interface GigabitEthernet .*

Richard

Re: ISE TACACS command authorization question

Seb Rupik — Mon, 05 Mar 2018 08:16:38 GMT

Hi there,

The columns are grant, command, argument. So you will want something like:

permit    configure    terminal
permit    interface    GigabitEthernet.*

cheers,

Seb.

Re: ISE TACACS command authorization question

Richard Dumag — Mon, 05 Mar 2018 09:38:34 GMT

Hi Seb,

Thank you for responding and explaining. I will give it a try and let you know.

Richard

Re: ISE TACACS command authorization question

Richard Dumag — Mon, 05 Mar 2018 17:13:34 GMT

Hi Seb,

That worked. Thank you again.

Richard

Re: ISE TACACS command authorization question

Richard Dumag — Fri, 23 Mar 2018 00:03:28 GMT

Hi Seb,

I have another question. How can I grant shutdown and no shutdown commands.

I've tried different ways but could not get it to work. For example

permit shutdown .*

permit no shutdown .*

permit interface GigabitEthernet.* shutdown

permit interface GigabitEthernet.* no shutdown

Appreciate your help. Thanks.

Richard

Re: ISE TACACS command authorization question

Seb Rupik — Fri, 23 Mar 2018 10:14:02 GMT

Hi Richard,

It should be:

Permit      shutdown
Permit      no                  shutdown

Leave out the .*

cheers,

Seb.

Re: ISE TACACS command authorization question

Richard Dumag — Fri, 23 Mar 2018 15:45:14 GMT

Hi Seb,

Thank you for the quick reply. I think I'm understanding the process now.

Richard