acs 5.2 shell authorization sets

[royalblues]

Can someone point me to a guide on how to configure shell auth sets in 5.2

I have done it in 4.2 but can't seem to get it working in new version

Requirement is to just allow shut / no shut command but as soon as I give access to config terminal the user gets all access

Narayan

Sent from Cisco Technical Support iPhone App

[andamani]

Hi,

Please do the following:

Policy elements > Command Sets > Create

Give a name

Enter the grant condition , commands and arguments

Click on ADD

Click on Submit

Click on Access-policy > Device Default Access > Authorization > Customize

Customized results > Available:Select Command set > Move to selected

ok.

Select the rule to apply TACACS authorization on the default device admin authorization page.

In the results of the shell profile Command set . Click on Select and select the command set you created.

Click on Ok.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.