Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Configuring users

I would like to configure 2 groups of users on my 4500s using local authentication .The first group would have access only to the show commands and at the test tdr commands.The other user group would have unlimited access.Is it possible to do it through local authentication or i have to use a RADIUS or TACACS+ server?Keep in mind that the users will access the switches through telnet

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Configuring users

If you go for Local use local authentication /authorization then you need to do it on per user basis and not on group basis. Locally we don't have any group. See this link

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800949d5.shtml

Best way to manage this set up is via radius or tacacs and set up command authorization using tacacs.

http://cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Regards,

~JG

Do rate helpful posts

2 REPLIES

Re: Configuring users

If you go for Local use local authentication /authorization then you need to do it on per user basis and not on group basis. Locally we don't have any group. See this link

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800949d5.shtml

Best way to manage this set up is via radius or tacacs and set up command authorization using tacacs.

http://cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

Regards,

~JG

Do rate helpful posts

New Member

Re: Configuring users

Further to that i would like to log the configuration changes on the switches.

140
Views
0
Helpful
2
Replies