We are planned to Implement command restrictions for different users in our Cisco Routers, Switches and ASA. For testing purpose, we have already hardened one of our router using privilege level commands. Its working fine, but for that we have to take all the EXEC, Configuration mode commands from that router and segregated it based on user needs. Just now, we got some glance about RBAC which was different from privilege levels. So our Questions are,
What is the difference between Privilege level and RBAC?
Comparing RBAC with Privilege levels, which is best one with respect to security?
Is RBAC supported in Cisco ASA devices?
For RBAC also, we should take note of all the commands and segregate it?
In Configuration Point of view, which is better one?
to partially answer your question, role based cli access is a lot more granular than privilege levels, that is, you can define specific commands you want your users to be able to execute, as opposed to privilege levels, which have a subset of commands that you cannot customize.
It is (obviously) a lot more tedious to set up role based access, but if you really want to control what your users are allowed and have access to, I would prefer that over privilege levels...
good morning I have this report from users, saying that they encounter connection issue only when they are wired , but the wireless I fine. both connection are using the same path to the internet ...please advised a troubleshooting plan.
Enterprise Switching Business Unit is glad to announce Beta release 16.12.3 for all Catalyst 9200/9300/9400/9500/9600. This release is made available to allow users to test, evaluate and share feedback before General Avail...
Hello.I make tools for gt CDP/LLDP data? VLANs/SVI and connected hosts (MAC/IP/Vendor).Work rfom windows.Can be exported to xml/json filedownload from: http://www.powerc.ru/download/PowerTOOLS.msi (for Windows).If You have questions please contact wi...
Hi there, I'm looking to upgrade the EHWIC-4G-LTE-G SKU MC7710 but i cant find the right firmware, or do I? I feel like I'm running arround in circles:Here I find the upgrade link: Cisco Firmware Upgrade Guide for Cellular Modems: htt...