Hi,
I am configuring cisco ACS 5.8 and want to allow some specific command in command set while blocking its related commands.
for e.g
permit ping .* size 1000
permit ping .* count 500
I just want to allow above two argements with mentioned values and want to deny everything else related to size and count. But I am unable to get it work.
ping x.x.x.x size 1500 (is denied)
ping x.x.x.x. count 1000 (is denied)
but
ping x.x.x.x size 1000 count 1000 (is allowed)
ping x.x.x.x count 500 size 2000 (is allowed)
from this what I understand is ACS matches the argument and allows whatever is being followed. I want to only allow whats allowed in command only.
any idea?
