ACS | Disabling command in

[John]

We would like to inquire if possible to restrict the access of our site IT, to prevent them changing the port that are already in siwtchport mode trunk, and also prevent them to shutdown.

configure terminal

show

interface

shutdown

no

exit

end

copy

enable

traceroute

switchport

clear port-security

[Raymond Zwarts]

Hi John,

You can do thois through Policy > Authorization. Create the relevant conditions and apply them there.

[Javier Henderson]

You will want to configure command authorization on the router (switch, etc.) and then create a command authorization set on ACS, and apply it to an authorization policy.