I need help on the Authorization Set. I have the following currently configured.
clear permit port-security dynamic
permit port-security all
permit port-security sticky
permit mac-address-table dynamic
Configure permit terminal
end
exit
show permit port-security
permit mac-address-table
permit interfaces status
permit interfaces stats
permit running-config interface FastEthernet
permit ver
switchport permit port-security
write permit memory
permit network
copy running-config startup-config
everything seems to work fine. For example you can not do a show running config.
my problem is the conf t. Once you in you can do any commands you want ie. "int fax/x/x" "switchport access vlan XX"
I tried different interface permit commands and still can not restrict commands.
None of the permit unmatched commands are checked.
What I would like is to permit interaface commands for port security commands, but not allow shut or no shut. etc.
