[tac_plus] enable additional commands centrally for IOS privilege levels other than 15

[Aaron Wasserott]

Look into the do_auth.pyc script to control command authorization.

http://www.tacacs.org/

-----Original Message-----
From: tac_plus [mailto:tac_plus-bounces at shrubbery.net] On Behalf Of Martin T
Sent: Thursday, April 16, 2015 9:55 AM
To: tac_plus at shrubbery.net
Subject: [tac_plus] enable additional commands centrally for IOS privilege levels other than 15

Hi,

privilege level 15 in IOS has all the possible commands for particular IOS release enabled. However, for example privilege level 1 has only few dozens of commands available. Now if I want to allow some of the privilege level 15 commands also for privilege level 1, then I could use the "privilege exec level 1 <command>" command. For example "privilege exec level 1 traceroute". However, is there a way to do this centrally in TACACS+ server?


thanks,
Martin
_______________________________________________
tac_plus mailing list
tac_plus at shrubbery.net
http://www.shrubbery.net/mailman/listinfo/tac_plus
This message contains information that may be confidential, privileged or otherwise protected by law from disclosure. It is intended for the exclusive use of the addressee(s). Unless you are the addressee or authorized agent of the addressee, you may not review, copy, distribute or disclose to anyone the message or any information contained within. If you have received this message in error, please contact the sender by electronic reply and immediately delete all copies of the message.