[tac_plus] ACL - Deny users access to specific hosts

Christian Karlsson ck at teknikmejeriet.se
Fri Aug 22 11:09:54 UTC 2008


Hello

I want to be able to specify what cisco routers a user can connect to.
I want him to be able to connect to router 192.168.1.1 but not the 
192.168.1.5 router.

Quote from guide:
"The ACL is applied to the source address that the device used to 
connect to the tac_plus daemon. On most routers, this can be explicitly 
set. For example, on a cisco router:"

Like i understood the ACL it changes where i can telnet from not to?
Is it possible to deny access to a cisco from tacacs_plus or other 
way(Still tacacs enabled cisco)
If not, is there a possibility that this function will be added in the 
future?

/Christian


More information about the tac_plus mailing list