How to Allow All arguments for a specific command in ACS 5.8

[Ali Muazzam]

Hi,

I am configuring command sets in ACS 5.8. 

I need to know how to allow all arguments for a specific command

e.g i want a user to configure a vlan on IOS device and its subsequent configuration options.

What i can see is i have to allow command vlan and then all arguments one by one

Early reply would be helpful

Cheers

[Gagandeep Singh]

Hi Ali,

If you can just configure vlan in command field keeping argument empty and see if it works for all vlan commands. Make sure you have command authorization for config-commands configured.

Regards

Gagan

PS : rate if it helps!!!

[Ali Muazzam]

Hi Gagan,

its not working with blank argument. 

Switch(config)#vlan 2002
Switch(config-vlan)#nam
Switch(config-vlan)#name TEST
Command authorization failed.

Switch(config-vlan)#

Vlan get created but cant go under vlan.

config-commands are already allowed thats why able to configure vlan.

any other option?

[Gagandeep Singh]

If you can send me the report of tacacs authorization report where you will find command for failed authorization.

We need to put the exact command in the command set.

Regards

Gagan