Restrict access to show isdn active

darrenriley5 · ‎02-02-2009

I have a number of users which we only want to allow them to use "show isdn active". What would be the correct method to do this conisdering we use Cisco ACS for AAA?

Thanks

jhillend · ‎02-03-2009

Use TACACS+ and command authorization. You will need to set up a generic command authorization set that allows all commands and one command authorization set that rejects any command except "show isdn active". You will also have to configure each network device to handle T+ command authorization.