Hi Ahmed,

Some staffs need a full right for all network devices, but I cannot add a same device into the other NDG. It said that IP is conflict with other NDG.

BR

Ray

JG,

I have not found "Assign a Shell Command Authorization Set on a per Network Device Group Basis" option in group setup. Do I need to enable something for activate it?

Thank you.

Ray

You need to switch the feature on under interface config... On the TACACS+ sub page enable the shell service.

In group setup you should then see the shell command device command authorisation section. You probably need to have some NDGs setup too.

Its also best to define the shell device command sets (under shared profile components) first. That way when you edit a group all you need to is choose which NDGs are assigned a particular DCS.

Hi,

I saw a "Shell Command Authorization" section, but there only have 3 options which are:

1. None

2. Assign a Shell Command Authorization Set for any network device

3. Per Group Command Authorization

There have not "Assign a Shell Command Authorization Set on a per Network Device Group Basis" option.

Do I missing anything?

Thank you.

Ray

Make sure you go to interface configuration----> Tacacs---->Enable advance tacacs options.

go to interface configuration----> Advanced option ----> Check all related to NAR--->restrt acs services.

It should be there

~JG

Hi JG

Thank you very much. I found it.

Ray