Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
423
Views
0
Helpful
1
Replies

ACS shell command to restrict access

wilson_1234_2
Level 3
Level 3

‎08-19-2008 04:12 AM - edited ‎03-10-2019 04:02 PM

I am trying to set up groups within ACS to have "show" privilege only, per the below link.

I have ACS set up and working for the network from the admin group allowing all access and it is working fine.

When I follow the instructions to allow only "ReadOnlyAccess", I can log into the devices, but do not have "enable" access.

I get an authenitcation error:

"T+ enable privilege too low"

Do I need to allow "enable" as well in the shell command?

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml')

Labels:
0 Helpful
1 Reply 1

dhananjoy chowdhury
Level 5
Level 5

‎08-20-2008 01:58 AM

Under the Advanced TACACS options, set the Max privilege of level 1 or higher..

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents