Shell Command(session) Authorization in ACS 4.2

[superjini75]

Hi, All~

Our customer is using ACS 4.2.

They would like to restriction shell command(session) in ACS 4.2.

For examples,

MSFC => 'session slot [slot #] processor [processor #]' => Command authorization failed.

Is this possible to deny for shell 'session' command?

Have a nice weekend.

Thanks.

Bruce Lee

[Amjad Abdullah]

Bruce:
If you are running Cisco IOS then yes it is possible.

AFAIK the MSFC runs on 5600  hardware and that runs IOS so I think it is possible for you

look into this example

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

please rate if useful and let us know if you got any problem with the configuration.

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"

[Jatin Katyal]

Could you please duplicate the problem and attach/paste the output of

debug tacacs

debug aaa authorization

Jatin Katyal
- Do rate helpful posts -