About james-k-cummins

james-k-cummins · 08-28-2026

Hi all,I am having a terrible time trying to figure out how to get ISE to restrict commands that user groups can execute on network switches via TACACS. I have no problem setting users with access level 1 or 15--that works great. But if I try to ut...

james-k-cummins · 09-01-2026

Well, you were pretty close to the solution. After scratching my head on this for the 3rd day in a row, I finally realized while looking at the live logs that there were no hits in the Authorization Policy column. The Authentication Policy column w...

james-k-cummins · 08-31-2026

Thank you for this. What you have posted is pretty much the same as I have tried, but the restrictions are not applying for some reason. I will continue to work this and let you know if I find a solution. Thanks for helping. Jim

james-k-cummins · 08-28-2026

I watched that same video a couple of days ago and I wish that it actually worked. If you watch that video to the end , you'll see that he can't even get it to work on his own lab lol.

james-k-cummins · 08-24-2026

I know this is over 10 years old, but this little tip right here is gold for anyone setting up a lab with no DNS server available.

Member Since	‎08-07-2026 08:05 AM
Date Last Visited	‎10-23-2026 01:32 AM
Posts	5

User Statistics

User Activity

Using ISE 3.5 to restrict commands via TACACS on switches

Re: Using ISE 3.5 to restrict commands via TACACS on switches

Re: Using ISE 3.5 to restrict commands via TACACS on switches

Re: Using ISE 3.5 to restrict commands via TACACS on switches

Re: ISE HA and CA deployment without a DNS server