[tac_plus] Deny Config Commands.

[Mailing Lists]

Hi All,

Is it possible to deny users from entering certain configuration commands
in TACACS?

So for example I want my users to be able to do enable and run whatever
commands they like, but once they type 'conf t' commands are restricted. If
it matters, I am specifically interested in denying 'no router' commands on
IOS-XE and Brocade NetIron (CER/S/MLX) devices.

Thanx in Advance.
Damien.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20160105/c3e76480/attachment.html>