ACS and PIX read-only access

[dlumsden]

Hi there,

I have a pix v7 plus ACS server. How do I setup a user account to give him read-only access? (for monitoring only)

Thanks

[Vivek Santuka]

Hi,

We will need to use shell command authorization sets with command authorization.

More about shell command sets at :-

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/g.htm#wp480029

command accounting on Pix 7.x can be enabled by :-

aaa authorization command LOCAL

I have assumed here that authentication and exec authorization is already working between the PIX and ACS.

Regards,

Vivek