How to limit the command "Reload" on some devices

Hello, sorry for my English.

We must limit the enforcement of the "Reload" command on some switches and routers considered basic or hubs.

I could set up the limitation of the use of the command using the EEM, but I left out a 6500 switch, core of the data center, because the version of the operating system does not support the EEM.

We have configured AAA and authentication on a GANYMEDE server where the users listed here (not local) to access devices.

In fact, grant us permissions to run certain commands only via the "tac_plus.conf" file that resides on the RADIUS server.

What I could not do is to restrict execution to "Recharge" by using the same method, but I was with EEM on the routers and critical switches.

I would like to know if it is possible to restrict the command "reload" on some devices in the configuration instructions in the file 'tac_plus.conf'.

Thank you very much.

Hello

I've never used in production another Ganymede except Cisco ACS server.

However, on your tac_plus.conf, you can create profiles and refuse or allow certain commands. In this profile, you can do a deny "reload". Have you tried?

It should looks like:

Group = {Usercommand}
by default the service allowed =
cmd = no {}
refuse to recharge *.
....."

On the switch, I assume that you have configured the aaa authorization command?

Thank you

PS: Please do not forget to rate and score as good response if this solves your problem

Tags: Cisco Security

Similar Questions

  • How to limit the command CTRL + K to show shortcuts

    Hi all


    Somebody help me to ' how to limit * CTRL + K * command to see a list of shortcut? I want to stop this list to display everything.

    And also to customize keyboard shortcuts.


    Arif

    I assume you are using forms on the web.

    If so, you must edit the fmrweb.res file located in the directory $ORACLE_HOME/forms.

    This file will has all the keymappings to function keys and you can customize them in there.
    To stop Ctrl-K work you must comment out the line for the keys Ctrl-K/Show by placing a pound sign (#) at the beginning of the line.
    Further instructions can be found in the file.

    Another tactic to take would be to introduce an OTHER KEY trigger to the level of form that gives a message such as "This key not used here, please..." ", you will then need to explicitly define triggers for all keys to be used, for example a KEY NEXT-ITEM trigger that contains the code"NEXT_ITEM ";

    hope this helps, please mark it as correct if it does.

    Published by: Ady Keeling on June 9, 2010 13:13

  • How to limit the bandwidth for each different devices connected to my router

    Hello

    Thanks in advance!

    Can you help me to limit bandwidth on perticular devices, I use NETGEAR (WNR1000v2 - N150 wireless router) and the version of the firmware of the V1.1.2.58, like almost 4 devices are connected to this router, I want to limit the speed of bandwidth to each device.

    I have not found the Qos in my Netgear.

    It might help if you provided in details with screenshots.

    Thank you

    Samira

    Not possible with this model of router

  • How to limit the length of the texts on iOS9?

    Hello

    I just worked on why I am required by my mobile / cell phone provider EA.  They charge any text as a picture message / SMS, it is longer than 120 characters?  Does anyone know how to limit the length of the texts / SMS so that it is impossible to send a more 120 characters or create an alert so that you are aware of the number of characters in the text / sms?

    Thank you very much

    Hello Turnus123,

    Thank you for using communities of Apple Support.

    I see that you will have to pay for SMS more than 120 characters.  To help identify messages exceeds this amount, you can activate a number of characters in the message settings.  Simply go to settings > Messages and activate "number of characters".

    Message settings

    Take care.

  • I have a new time capsule airport. How to limit the search for who can use the time capsule backup process?

    I have a new time capsule airport. How to limit the search for who can use the time capsule backup process?

    Set a password to disk... disk tab in the utility... and just give to those you want to use the TC...

  • Is there an online class to learn exactly how to use the command prompt which is quite through. OR y at - it clear a book that explains in detail for this? Who should I contact?

    I would like to know how to use the command prompt.  The nethodology type in the cmd prompt with the syntax and the Liposuction, in other words, the real return to a command prompt. I downloaded about evertthing I can find about this, but can't seem to put it all.

    My OS is Windows XP Pro sp3, lots of RAM, my address is * address email is removed from the privacy *.   I would like to take a rough online study if one is available if it is not too expensive.

    It really depends on what you mean by "to a command prompt."

    If you open a command prompt window (for example, in start > run > cmd > OK), you can enter a number of orders.  The list of available commands, including their syntax, is here--> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntcmds.mspx?mfr=true

    You can also follow the links here:http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntcmds_o.mspx

    If you want to get more sophisticated - automating command-line tasks - you can start here: http://technet.microsoft.com/en-us/scriptcenter/default.aspx

  • How to limit the media sharing on my computer

    Original title: multimedia file sharing...

    How to limit the sharing on my computer, IE multimedia: music, images and other files from other computers on the network or cell phones that are capable of DLNA?

    Hello

     
    Please check the links given and see if they help.
  • How to limit the email receipt/downloaded size?

    I need information on how to limit the size of an email received or downloaded in Windows Mail to reduce the cost of the enamel of satellite data. Want to just send and receive, especially to receive emails with no graphics and keep it small.

    Simply set up for this purpose a message rule: tools, Message rules, mail, new...
     
    Gary van, Microsoft MVP (Mail)
    ------------------------------------------------------

    "moosehuntingguy" wrote in the new message: * e-mail address is removed from the privacy... *
    I need information on how to limit the size of an email received or downloaded in Windows Mail to reduce the cost of the enamel of satellite data. Want to just send and receive, especially to receive emails with no graphics and keep it small.

    Gary van, MVP (Mail)

  • How to limit the number of printers can be installed on this computer by using Group Policy?

    How to limit the number of printers can be installed on this computer by using Group Policy?

    Hello

    Thanks for asking! If I understand correctly, you should limit the printers installed on the computer by using Group Policy. I suggest you follow the troubleshooting steps to check if this may help.

    The question you have posted is related to Technet and would be better suited to the Technet community. Please visit the link below to find a community that will provide the best support.
    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  • How to use the command import on the production environment?

    Hi gurus of the OFA.

    I want to know about the production environment OAF and development environment, the differences between them and how to use the command import on the production environment?



    Concerning

    Ajay Sharma
  • If I don't get creative cloud, how will limit the use of photoshop touch?

    If I don't get creative cloud, how will limit the use of photoshop touch?

    I don't think it will limit your work with PS Touch, but could enahnce it a little.

    Just try to free membership of 2 GB and find out:

    https://creative.Adobe.com/plans

    Thank you!

  • How to use the command line in w/Merge Vista?-need to cut password expires...

    I use Vista Home Basic by Fusion on a Mac Intel. The instructions to stop Vista expire a password is to use the command-line under Vista. I already know these instructions, so my question is:

    How to use the command line inside Vista, on a virtual machine?

    Thanks for your help in advance, I don't want to mess something else.

    Jacob.

    With assistance from the command-line on Vista is no different if it is to be run on a virtual machine or on a physical machine, so just like you would on any physical machine.

  • How to limit the number of connection to DB

    Hello

    I just go to the topic of connection pooling.
    Here, I would like to understand the number of details of connections that already exists in the database.

    Kindly guide me to know the following details.

    How to know the number of connections available in the database?
    How to limit the number of connections?

    V_$ Resource_Limit contains details of the sessions. Is this even for connections?

    I have more clarification on the difference of connections and Sessions.

    Kindly tell me the above.

    Thank you
    Orahar.

    Orahar wrote:
    Hello

    I just go to the topic of connection pooling.
    Here, I would like to understand the number of details of connections that already exists in the database.

    Kindly guide me to know the following details.

    How to know the number of connections available in the database?

    The number of currently active sessions (db, internal sessions registered)

    SELECT COUNT (*)
    SESSION $ v

    How to limit the number of connections?

    to increase or decrease the maximum number of connections:

    for example: change processes control system = 200 scope = spfile;

    >

    V_$ Resource_Limit contains details of the sessions. Is this even for connections?

    I have more clarification on the difference of connections and Sessions.

    Connection means a user process is successfully connected to the listener to have a session on the database running instance. (listener who listen s new connection requests)
    Establish sessions: means, a (dedicated) server process began to serve a user process. It is done when the credentials of the user authenticated successfully. Now, from process-user shall communicate to the server process directly.

    hope that helps.

    Kind regards
    X.

  • How to limit the length of the EditText control?

    All,

    How to limit the length of an EditText to accept ONLY 3 characters.

    The editText.characters property defines a size by default, but the user can always type more than 3 characters in the field.

    I got it!!!

    var win = new Window("dialog", "Limit 3");
    var txtLimit3 = win.add("edittext");
    txtLimit3.characters = 5;
    
    txtLimit3.onChanging = function (){
              howmany = txtLimit3.text;
              if (howmany.length > 3){
                        txtLimit3.text = "";
                        txtLimit3.textselection = howmany.slice(0,3)
                        }
              }
    
    txtLimit3.active = true;
    win.show();
    
  • How to change the background color of some rows in a Datagrid?

    How to change the background color of some rows in a Datagrid?

    Hee is an excellent example:
    http://www.CFLEX.NET/showfiledetails.cfm?channelId=1&object=file&ObjectID=487

    Tracy

Maybe you are looking for

  • Satellite A60-106 - cannot find it in the list of downloads

    Hello I have a Toshiba Satellite A60-106 (it is what it says on the label). I don't see this model listed anywhere on the page to download to http://uk.computers.toshiba-europe.com/innovation/download_drivers_bios.jsp?service=UK Can anyone help? This

  • How to install windows Installer 3.1

    Every time I try to download the Installer 3.1, I just get directed to the agreement of the end user, but can not accept its conditions, or download the program. What should I do?

  • free hp media smart webcam download

    Where & how to download hp media smart webcam free without stress?

  • Factory reset 3030 for config

    I have a hub 3030 I lost the admin on due rights to other 'try' set up GANYMEDE auth. I can log in with the admin account but I can't do all the activities at the level of the administrator (Admin |) Access rights). I want to wipe the 3030 and start

  • How do we change our police and Style on Acrobat Reader DC

    I can't find the way how to change the font and Style on Acrobat Reader DC,I don't like the style that comes out, my clients don't like it, I want it to look more to a SIGNATUREis there a way to change this...? ... Please, someone let me know... Than