Hi There, I am trying to setup command authorization in ACS 4.2.1.15 but its partially working.
I have setup three sets of shell command ... full access is working fine. another one is read only which is causing problem. in this command set I have allowed show commands and clear commands....everything is working fine but users can execute Write command from # prompt and they can also execute copy running-config startup-config....
I have define command set as below:
clear permit arp
show permit interface
permit version
permit port-security
i hav selected unmatched command as deny and unmatched argument as deny.
I dont know why its happening. am i missing something.
Please help...
