Henry-Nicolas Tourneur wrote:
I'm not willing to use Tacacs+ because I'm setting-up a new server environment and I don't want to need to manually compile tac-plus and get broken dependencies after an upgrade.
Statically compile it?
Using tac-plus from the APT would be far more easier, unfortunately, it's not available any more. And, we are not interested in purchasing a Cisco ACS product just for doing what tac-plus does.
Cisco IOS *DOES NOT SUPPORT* radius for per-command authorization so a radius server will not do what you want.
Tacacs is your only option. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
