Chapter 23
Configuring Management Access
Figure 23-3
•
When you abbreviate a command at the command line, the FWSM expands the prefix and main
command to the full text, but it sends additional arguments to the TACACS+ server as you enter
them.
For example, if you enter sh log, then the FWSM sends the entire command to the TACACS+ server,
show logging. However, if you enter sh log mess, then the FWSM sends show logging mess to the
TACACS+ server, and not the expanded command show logging message. You can configure
multiple spellings of the same argument to anticipate abbreviations (see
Figure 23-4
We recommend that you allow the following basic commands for all users:
•
–
–
–
–
–
–
–
–
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Disallowing Arguments
Specifying Abbreviations
show checksum
show curpriv
enable
help
show history
login
logout
pager
AAA for System Administrators
Figure
23-4).
23-21