cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
366
Views
0
Helpful
1
Replies

Tacacs+ authorization

jenssri
Level 1
Level 1

I am trying to determine if there is the ability with a css11501 running version 07.40.1.03 to authorize indivdual commands. Basically what I would like the ability to do is extend the "user" security level to have the ability to suspend and re-activate indivdual services for maintenance windows without having to involve the group that manages the CSS. Preference would be to do this via WebNS, but if necessary to be done at the command line this is ok. Any chance I can extend beyond either giving privelege or not giving privelege which appears to be the only documented options for the css in my searching anyway.

Thanks in advance for an answer.

1 Reply 1

Zach Seils
Level 7
Level 7

You can do per-command authorization on the CSS with the command:

tacacs-server authorize config

Note that you will also want to have 'tacacs-server send-full-command' enabled.

~Zach

Review Cisco Networking for a $25 gift card