Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACS Authorization

I'd like to configure shell authorization sets in ACS for Routers and switches .In this scenario, the users are able to use selective commands (configure terminal and to shut and no shut the interface only ) how can i do that on ACS

I tried the following but it doesn't work

configure permit terminal

interface permit shutdown

permit no shtdown

when i tested i can use any command under the interface configuration mode but i'd like to restrict it to shut and no shut only

4 REPLIES

Re: ACS Authorization

Make sure permit unmatched argument is not checked. See attachment.

Regards,

~JG

Do rate helpful posts

New Member

Re: ACS Authorization

I need it on all the interfaces not one only and Should i configure privilege command on the router and switches too?

New Member

Re: ACS Authorization

I am having the same problem under Config t. I can't seem to restrict anything after that. I do not have perment unmatched... chekced,

New Member

Re: ACS Authorization

Steve,

Did you resolve this issue??? I have configured shell authorization on the ACS and want to allow certain users to access conf t but limit their commands after this. When I do a shell set that includes 'configure permit terminal' there does not appear to be anyway to control the configuration commands. Access to all configuration is granted.

Any guidence would be appreciated.

Dean

176
Views
0
Helpful
4
Replies