Restrict access to show isdn active

Unanswered Question
Feb 2nd, 2009
User Badges:

I have a number of users which we only want to allow them to use "show isdn active". What would be the correct method to do this conisdering we use Cisco ACS for AAA?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jhillend Tue, 02/03/2009 - 12:06
User Badges:
  • Bronze, 100 points or more

Use TACACS+ and command authorization. You will need to set up a generic command authorization set that allows all commands and one command authorization set that rejects any command except "show isdn active". You will also have to configure each network device to handle T+ command authorization.


This Discussion