ACS 5.1 Shell Profiles

Unanswered Question
Sep 26th, 2010
User Badges:

Dear Friends,


I need your help in clarifying the conceptual doubt. I am not able to understand the difference between the following in ACS 5.1


Shell Profiles

Command Sets


I found this under POLICY ELEMENTS > AUTHORIZATION & PERMISSION > DEVICE ADMINISTRATION >


Please clarify the difference between these 2 elements and how it is used


regards,


SAIRAM

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
jrabinow Sun, 09/26/2010 - 22:10
User Badges:
  • Cisco Employee,

Using TACACS+ there are permissions that are defined when the se

ssion is authorized and can also be per command level authorization.


When the session is authorized (user logs in to a device) the permissions defined in the shell profile are applied; this includes items such as the privelege level


When the user enter commands at the device and performs per-command authorization, the command sets are applied

snarayanaraju Sun, 09/26/2010 - 23:30
User Badges:

Hi,


Thanks for your time and sharing this valuable stuff. But i still not able to differentiate this.


If you can spend some more time, would you please explain this with example. Like when a user login to device when the "shell profile" is used and when the "command sets" is used.


Also, in which scenario "shell profile" is used and in which case ""command sets" are used.


I googled enough and tired


regards,


SAIRAM

Actions

This Discussion