cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
477
Views
0
Helpful
3
Replies

Roles & Command Sets - TACACS+ - IOS

victguti
Level 1
Level 1

Hello,


I have been asked to implement a more granular TACACS+ authorization policy for IOS devices based on roles and command sets. I would like to know what are the most typical roles utilized and the command sets for each of them.

I was wondering if you have some recommendation or examples that I could use. (In the same way that default task-groups are provided for IOS-XR devices but for IOS devices in this case)


Thanks and regards,


Víctor.





3 Replies 3

hslai
Cisco Employee
Cisco Employee

Thanks for your answer. I had already checked that link but I could just find couple of roles showed in Youtube videos for demo purposes. I am looking for more real examples of roles and command sets used by customers or a default set of roles/commands suggested by Cisco.

Regards,

Víctor.

AFAIK Cisco IOS-XR works very differently from Cisco IOS so I do not think there exists a list of comparable role mappings.

I would suggest to start with simple command sets and then develop over-time after gathering requirements and inputs from the organizations.