Cisco PIX 500 Series Configuration Manual page 907

Chapter 40 Managing System Access
Figure 40-1
• For commands that are a single word, you must permit unmatched arguments, even if there are no
arguments for the command, for example enable or help (see
Figure 40-2
• To disallow some arguments, enter the arguments preceded by deny.
For example, to allow enable, but not enable password, enter enable in the commands box, and
deny password in the arguments box. Be sure to select the Permit Unmatched Args check box so
that enable alone is still allowed (see
OL-12172-03
Permitting All Related Commands
Permitting Single Word Commands
Figure
Cisco Security Appliance Command Line Configuration Guide
Configuring AAA for System Administrators
Figure 40-2).
40-3).
40-15