TACACS ACS interface command

rajeshk200_2 · ‎04-27-2007

Hi all,

how do we give only interface level config command access and show commands for usergroup using tacacs server.

Thanks in advance.

Rgds,

Rajeshac

mohammedmahmoud · ‎04-27-2007

Hi Rajeshac,

You can do so via 2 methods:

1. Configure the TACACS server to assign the user a certain privilege level, and then using the privilege command on the router, configure which commands can the user with this privilege level issue.

2. Configure the TACACS server to do authorization for the router, and configure the router to accept this command authorization, and then configure on the TACACS the commands that a user can issue. (recommended)

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804fde16.html

HTH, please rate if it does help,

Mohammed Mahmoud.

royalblues · ‎04-27-2007

Rajesh,

You can also check out this cool attachment in the following post

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=AAA&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddd26a6/0#selected_message

HTH, rate if it does

Narayan