About rrcarter79

Users authorized commands · 01-15-2003

I want to restrict some users to "show running-config" command. I have created a Shell Command Authorization Set with "show" command "permit running-config". Under the TACACS+ setting the Shell (exec) is selected and Privilege level with a value of ...

rrcarter79 · 01-13-2003

I'm using:CiscoSecure ACS v3.0 for Windows 2000/NTRelease 3.0(1) Build 32My network routers and switches are from multiple vendors, Cisco, Extreme, and HP. Some of the equipment supports radius, some Tacacs, and some both protocols.I want to control...

Re: Users authorized commands · 01-23-2003

I configured the commands that I want the users to be able to execute. I checked the box that deny and unmatched commands.Commands allowed:config - permit termhelptraceroutepingshow location logout

Re: Users authorized commands · 01-21-2003

- config - session - debugallows "line vty 0 4"aaa new-modelaaa authentication login vty group tacacs+ localaaa authentication login console lineaaa authentication enable default group tacacs+ enableaaa authorization config-commandsaaa authorization ...

rrcarter79 · 01-21-2003

Jonathan,The 4th reply, by gfullage, in this conversation tells how to do this. gfullage recommends:Ensure that you have at least one other user that has no command restrictions set, or better yet, do the following: > aaa authentication login console...

Re: Users authorized commands · 01-21-2003

Here is the login session and debug. I have allowed "config" with "permit term" and "location".I don't want the user to access the interfaces or lines.Login:Unauthorized access is strictly prohibited! User Access VerificationUsername: usernamePasswo...

Re: Users authorized commands · 01-17-2003

I've added aaa authorization config-commands to no avail. I assume it will authorize config-commands against the command authorization set.The only config-command that I have in the command authorization set is "location"

Member Since	‎04-19-2002 10:34 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	16

User Statistics

User Activity

Users authorized commands

Radius and TACACS username with ACS 3.0

Re: Users authorized commands

Re: Users authorized commands

Re: AAA Authorization - ACS 3.0.2 on Win2K

Re: Users authorized commands

Re: Users authorized commands