Thanks for your help, It works! I missed this command. Best regards.
-----Message d'origine----- De : Junaid [mailto:[EMAIL PROTECTED] Envoyé : vendredi 14 décembre 2007 22:15 À : DAVID Sébastien Cc : Oliver Boehmer (oboehmer); [email protected] Objet : Re: [c-nsp] Cisco & Tacacs+ Hi David, Try this in your AAA configs: aaa authorization config-commands Regards, Junaid. On Dec 13, 2007 12:28 AM, DAVID Sébastien <[EMAIL PROTECTED]> wrote: > > > Yes i have enable aaa command : > > aaa new-model > aaa authentication login telnet group tacacs+ enable > aaa authentication login console group tacacs+ enable > aaa authentication enable default group tacacs+ enable > aaa authorization exec default group tacacs+ if-authenticated none > aaa authorization commands 1 default group tacacs+ none > aaa authorization commands 15 default group tacacs+ none > aaa accounting exec default start-stop group tacacs+ > aaa accounting connection default start-stop group tacacs+ > aaa accounting system default start-stop group tacacs+ > > My user can enter in configure mode and have access to all command. I'd like > to restrict to configure an interface in example to set speed , duplex .... > > Thanks > -----Message d'origine----- > De: Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] > Envoyé: mercredi 12 décembre 2007 12:27 > À: DAVID Sébastien; [email protected] > Objet: RE: [c-nsp] Cisco & Tacacs+ > > > DAVID Sébastien <> wrote on Tuesday, December 11, 2007 8:56 AM: > > > Hi, > > > > > > > > I'm trying to set up my network with a tacacs server based on debian > > for authentification. > > > > Everything works correctly but I meet difficulties to limit the > > commands in configure mode > > How does your aaa config look like? Did you enable "aaa authorization > commands 15 ..." and "aaa authorization config-commands"? You can check debug > via "debug aaa author" to see what's happening.. > > oli > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
