ACS

[ney25]

Hi NetPro,

currently i am using tacas, and i want to create a new user account but limited right. example: this user only can use " show Command " in my Cisco switch.

how do i make it ?

your reply will be highly appreciated.

regards,

Jackal

[jreekers]

Hi Jackal.

For a quick answer, you can check this White Paper out:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a0080088893.shtml

It has some good information about assigning priveledge levels, etc.

If you need a more in-depth answer, you should probably post this over on the Netpro Security section rather than the Wireless section, and those folks could walk you through specific set-ups.

Hope this helps.

-Joe

[ney25]

Thanks Joe.

regards,

JAckal

[m.saunders]

Hi Jackal, if you didn't get a response yet, you need to click the user you created and scroll down to the portion called "TACACS+ Enable Control". Click "Define max Privilege on a per Network device group basis". Choose the "Device group" you want to apply the restrictions to and then level you want to apply. Usually a level 1 will get you the show commands but you'll have to be careful. Setting the level too low may not give them Enable rights.