Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

TACACS configuration to restrict commands

Status
Not open for further replies.

takdy

Technical User
Mar 16, 2014
1
OM
Hello all,

This is related to the thread557-1568656 which was post by bizzaro. unfortunately I was not able to rely to that thread. I want to deny some commands for the group SUPER_USER and through below would work. It works fine for other commands except "router" command. The aim is that I don't want SUPER_USER to execute a command like "MYROUTER(config)#router bgp 23428"

group = SUPER_USER {
default service = permit
cmd = debug {
deny .*
}
cmd = router {
deny .*
}
cmd = reload {
deny .*
}
cmd = clear {
deny .*
}
service = exec {
priv-lvl = 15
}
}

Best regards,
Takdy
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top