tacacs+

[elite2010]

Hi,

How can I give permit only to add  ospf router instance and remove ospf router instance  only inside vrf . It means the user should not have any permission to create outside the vrf . 

If In case tacas server failed how to give a fall back method to authorize commands ?

Thanks

[Mohammed al Baqari]

Yes you can do this in the command set. Configure 'router' as command and
'ospf vrf' as attribute. This will prevent users from configure ospf
without vrf

*** remember to rate useful posts

[elite2010]

Hi,

Thanks for the reply . 

Can you give an example . I am using tac_plus free verison not ISE 

Thnaks again 

[Jason Kunst · Accepted solution]

This is an ISE forum, i suggest posting in appropriate vendor forum or Cisco forum for your platform