TACACS vs parser views

[tedauction]

Hello we are wanting to only allow certain logon users access to certain commands and privilege levels.

I see you can do this simple user account and parser view configuration on switches and routers.

I understand you can also do this with a TACACs server i.e. granularity of user access.

Is the only benefit, the fact that with a TACACs server I can centralise this login privilege and command access granularity ?

Thank you for any info.

[tedauction]

Hello, does anyone have any comments on this ?

Thank you.

[Rob Ingram]

Hi,
Basically using TACACS server you centralise management of commands, which means any changes only need to be made on the TACACS server rather than on each device.

You also have the ability to integrate with AD and use that UN/PW for logging into the devices. Another benefit of using TACACS is when a user leaves, you do not need to remove the user account from each device, just disable on the TACACS server or AD.

You also get all TACACS accounting logs stored centrally for auditing of what commands a user entered on the devices

HTH