Cisco 2509 - Router - EN User Manual page 241

Chapter 7 Setting Up and Managing User Accounts
To define the specific Cisco IOS commands and arguments to be permitted or
Step 7
denied for this user, follow these steps:
a.
b.
c.
This is a powerful, advanced feature and should be used by an administrator
Warning
skilled with Cisco IOS commands. Correct syntax is the responsibility of the
administrator. For information on how Cisco Secure ACS uses pattern matching
in command arguments, see
Tip
Do one of the following:
Step 8
•
•
78-14696-01, Version 3.1
Result: The NDG or NDGs and associated shell command authorization set
or sets appear paired in the table.
Select the Per User Command Authorization option.
Under Unmatched Cisco IOS commands, select either Permit or Deny.
If you select Permit, the user can issue all commands not specifically listed.
If you select Deny, the user can issue only those commands listed.
To list particular commands to be permitted or denied, select the Command
check box and then type the name of the command, define its arguments using
standard permit or deny syntax, and select whether unlisted arguments are to
be permitted or denied.
To enter several commands, you must click Submit after specifying a
command. A new command entry box appears below the box you just
completed.
If you are finished configuring the user account options, click Submit to
record the options.
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
User Guide for Cisco Secure ACS for Windows Server
Advanced User Authentication Settings
About Pattern Matching, page 5-15.
7-27