i am trying to get around 900 cisco routers authenticated through Cisco TACACS+ ,while doing this i added two clients and two users corrosponding to them,i hav two issues
1# if there is a user and a group each needed for each client if we add them individually.(i.e. 900 users and groups) ?
2 #I plan to group all my devices ,so i plan to form a NDG,i have prepared three shell command authorization sets and three users in three separate groups,
each user has different commands execution permission,can i use all three users on same NDG?(to acess all clients in the NDG with different privileges.
Kindly let me know if i m thinking on right lines and Is there any other way to administer such large no. of clients.