On 28 August 2011 06:32, Olivier CALVANO <[email protected]> wrote:
> I want know if i can limit a user to : > - See port states on of module card (not all) > - See vlan database and can create/modofy/delete a vlan > - Can configure a lot of Port on a specifique card > > Although TACACS+ will let you authorise individual commands, it is a challenge to do this on a "stateful" basis i.e. to permit users to run commands on certain interfaces but not others. Sounds like you are trying to "virtualise" management access to your switch, like VDC on the Nexus 7k I don't think you're going to achieve all of what you want on traditional switch IOS. Aled _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
