ACS 5.1 Shell Profiles

snarayanaraju · ‎09-26-2010

Dear Friends,

I need your help in clarifying the conceptual doubt. I am not able to understand the difference between the following in ACS 5.1

Shell Profiles

Command Sets

I found this under POLICY ELEMENTS > AUTHORIZATION & PERMISSION > DEVICE ADMINISTRATION >

Please clarify the difference between these 2 elements and how it is used

regards,

SAIRAM

jrabinow · ‎09-26-2010

Using TACACS+ there are permissions that are defined when the se

ssion is authorized and can also be per command level authorization.

When the session is authorized (user logs in to a device) the permissions defined in the shell profile are applied; this includes items such as the privelege level

When the user enter commands at the device and performs per-command authorization, the command sets are applied

snarayanaraju · ‎09-26-2010

Hi,

Thanks for your time and sharing this valuable stuff. But i still not able to differentiate this.

If you can spend some more time, would you please explain this with example. Like when a user login to device when the "shell profile" is used and when the "command sets" is used.

Also, in which scenario "shell profile" is used and in which case ""command sets" are used.

I googled enough and tired

regards,

SAIRAM