Hi all!
I'm trying to enable NACM to restrict NETCONF operations. I have NACM working with the default configurations and I have only read-only access.
My problem is that I have no "nacm" commands on my router, and it seems that the only way to create rules and groups is with NETCONF but as I mentioned before, only read-only is allowed on NETCONF. This is like the chicken-egg dilema..
One option is to disable NACM, create the rules/groups with NETCONF and then enable NACM but we have restrictions at my work and we can't expose the NETCONF interface without write restrictions.
Any thoughts on how to solve this?
I'm doing this on an ASR 9006 running 6.4.2
Thanks!
#asr9000 #nacm #netconf
