ISE TACACS command authorization question

[Richard Dumag]

Hello,,

I would like to allow entry level admins to be able to configure all switch access interfaces/ports.  What is the command?  I've tried different commands but to no avail.  Below are what I have tried so far but do not work.  Any assistance is appreciated.  Thanks.

permit      configure      interface all

permit      configure      interface GigabitEthernet all

permit      configure      interface .*

permit      configure      interface GigabitEthernet .*

Richard

[Seb Rupik · Accepted solution]

Hi there,

The columns are grant, command, argument. So you will want something like:

permit    configure    terminal
permit    interface    GigabitEthernet.*

cheers,

Seb.

[Richard Dumag]

Hi Seb, 

Thank you for responding and explaining. I will give it a try and let you know. 

Richard

[Richard Dumag]

Hi Seb,

That worked.  Thank you again.

Richard 

[Richard Dumag]

Hi Seb,

I have another question.  How can I grant shutdown and no shutdown commands.

I've tried different ways but could not get it to work.  For example

permit    shutdown      .*

permit    no shutdown  .*

permit    interface  GigabitEthernet.* shutdown

permit   interface    GigabitEthernet.*  no shutdown

Appreciate your help.  Thanks.

Richard

[Seb Rupik · Accepted solution]

Hi Richard,

It should be:

Permit      shutdown
Permit      no                  shutdown

 Leave out the .*

cheers,

Seb.

[Richard Dumag]

Hi Seb,

Thank you for the quick reply.  I think I'm understanding the process now.  

Richard