Restrict access to show isdn active

Unanswered Question
Feb 2nd, 2009

I have a number of users which we only want to allow them to use "show isdn active". What would be the correct method to do this conisdering we use Cisco ACS for AAA?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jhillend Tue, 02/03/2009 - 12:06

Use TACACS+ and command authorization. You will need to set up a generic command authorization set that allows all commands and one command authorization set that rejects any command except "show isdn active". You will also have to configure each network device to handle T+ command authorization.


This Discussion