Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ACS 5.1 Shell Profiles

Dear Friends,

I need your help in clarifying the conceptual doubt. I am not able to understand the difference between the following in ACS 5.1

Shell Profiles

Command Sets

I found this under POLICY ELEMENTS > AUTHORIZATION & PERMISSION > DEVICE ADMINISTRATION >

Please clarify the difference between these 2 elements and how it is used

regards,

SAIRAM

2 REPLIES
Gold

Re: ACS 5.1 Shell Profiles

Using TACACS+ there are permissions that are defined when the se

ssion is authorized and can also be per command level authorization.

When the session is authorized (user logs in to a device) the permissions defined in the shell profile are applied; this includes items such as the privelege level

When the user enter commands at the device and performs per-command authorization, the command sets are applied

New Member

Re: ACS 5.1 Shell Profiles

Hi,

Thanks for your time and sharing this valuable stuff. But i still not able to differentiate this.

If you can spend some more time, would you please explain this with example. Like when a user login to device when the "shell profile" is used and when the "command sets" is used.

Also, in which scenario "shell profile" is used and in which case ""command sets" are used.

I googled enough and tired

regards,

SAIRAM

592
Views
5
Helpful
2
Replies
CreatePlease to create content