Shell permission command to the device using NDG sets?

Hello. I have configured NDG, there is a group called "GR1" with 30 switch.

This group is set up a command authorization set Shell called "Monitoring", which don't show commands, ping and traceroute are allowed.

I want to let the users to pass in only 10 of the 'GR 1' group set up some interfaces and IP addresses, go to the other does not. ! Note: The number of interface is not the same for each switch can be FA0 / 1, but for others it can fa0/3.etc.

I want to keep these 10 switch within the group "GR1", it is possible to do this configuration?

-Thank you

I edited my post above to make it clearer. You can assign auth sets. Shell the user, group, or level NDG. More details are mentioned on the following link:

http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/SPC.html#wpmkr697610

AFAIR, one device (AAA Client) can be part of only NDG, so you can't get your condition using by NDG Shell command authorization sets. Unless you break the NDG in NDG more than one.

You can assign authorization at the level of the user or the Group (after the appropriate group users) to achieve your requirement.

You can also use the 'privilege' on the switch command to ensure that users can only see the commands you want. For example, when a user connects it will be placed on level 7. Now you can keep unwanted orders at level 15 and lower orders you want to level 7. All other users would receive a lower level (e.g. level 5), so they will not be able to run these commands.

Concerning

Farrukh

Tags: Cisco Security

Similar Questions

  • Can I have the Profile Manager uses the name of the device used when the placement of placeholders?

    Can I have the Profile Manager uses the name of the device used when the placement of placeholders? Currently, all get renamed 'iPad' when the device through DEP configuration.

    No, but

    I was putting new devices in groups of temporary devices and renaming in bulk, once they are configured for the user, by using user variables / unit...

    The other annoying problem would be the user modifies the device name when they connect it iTunes...

    • the %destinataire% email - address email (the EMailAddress attribute)
    • first_name % - first name (FirstName attribute)
    • full_name % - full name (attribute RealName)
    • % of guid guid (GeneratedID attribute)
    • last_name % - last name (the LastName attribute)
    • the title of the post (the JobTitle attribute) %

    -% mobile_phone % the number of mobile (laptop attribute)

    • short_name % name run (the RecordName, generally the name of the account attribute)

    The variables of the unit are:

    • % BuildVersion % - full OS version on the device
    • ICCID % - ICCID (from the SIM card)
    • IMEI % - IMEI (International Mobile Equipment Identity)
    • OSVersion % - common version number of the operating system of the device
    • ProductName % - name of the product
    • SerialNumber % - serial number
    • % WIFIMAC %-MAC address of the WiFi interface
  • the rest of the device used to "ready boost" can be used as a storage

    the rest of the device used to "ready boost" can be used as a storage

    Hi Sam,

    You cannot use the available space on the Flash DRIVE or flash memory card in your computer that is used for ReadyBoost.

    ReadyBoost to effectively speed up your computer, the flash drive or memory card should have at least 1 gigabyte (GB) of available space. If your drive or the card doesn't have enough available space for ReadyBoost, you'll see a message telling you to free space on this subject. For best results, use a Flash DRIVE or flash memory card with at least double the amount of available space as the amount of memory (live RAM) on your computer.

    For more information about ReadyBoost, see this article:

    ReadyBoost (valid also for Windows 8)

    http://Windows.Microsoft.com/en-in/Windows7/products/features/ReadyBoost

    I hope this helps. If you need help with Windows, let us know and will be happy to help you.

  • Provision of phone is the device used to access the site by default.

    I tried to figure this out on my own & have had zero luck after hours and hours. I hope someone can provide assistance.

    I have built many sites using Muse, if I build a 'Phone' layout, transfer it with the layout "Desktop" or "Compressed", that the 'phone' comes back every time, little matter device used to access the site. Current site I'm working on and who need to get the mobile layout working for client is www.limegreenmasonry.com .

    I discovered the site of my Surface Pro 3, 5 Nexus and Nexus 7, all with the same result of 'Phone' of loading default layout. I use the latest version of Muse, but had these problems with the last build too. Firefox is underway on SP3, mobile Chrome on 5 of Nexus and Nexus 7.

    Help will be very appreciated.

    Remove the following custom code of thesection of the Properties Page or the Site properties:

    Not sure why that would have been added, but it is certainly not there.

    Then update to version 2015.1 recently published Muse and re-publish/upload.

    There was a bug which translates a generated Muse site evil redirecting to available phone in some browsers on Windows 10 if the computer or the device has a HiDPI touch screen (i.e. a Surface Pro or similar laptop / Tablet hybrid with a screen HiDPI). 2015.1 release changes exit Muse to properly manage display information provided by browsers when running on Windows 10.

    That said, there is still a philosophical question about whether a device hybrid as a Surface Pro is a desktop computer or a Tablet, and there is certainly no consensus. Browsers IE and edge Act mainly as if it is a tablet. Chrome and Firefox act like the desktop browser they are. And to complicate things more, a Muse site chooses to charge your shelf or desk combination by looking at the "reference pixel" browser width of your screen. So depending on the browser used, the size of the physical screen, the parameters of the screen (i.e. "Display scaling" setting) the orientation of the device (portrait or landscape) and the browser used, you can get the presentation of the Tablet, otherwise you might get the office layout.

    It is generally a good practice to provide 'Go to the site of office', 'Go to the tablet site' and 'Go to the site of phone' links when creating an Adaptive development site.

  • Satellite P200-1EE - how to connect to the device using Belkin Mini Bluetooth Adapter

    Please can someone help with my problem.

    I am running Vista sp2 and just bought one of these adapters.
    Tried to load the software and I'm having problems.

    This icon appears in the system tray, but no icon on the desktop.

    Now I have 3 other computers running XP and have installed the software without problem.

    Belkin has called this afternoon and they recommended their virtual software but this has not solved the problem.
    Tried the Broadcom website and download their latest software but still no joy.

    Without the software, I can't pair devices to the computer, but I can print for my C5380.

    Someone had a similar problem?
    What is annoying is that they use a Toshiba laptop like the screenshot in the installation guide.

    Help!

    OK, I worked in a solution.

    The software cd has a file for windows like vista

    The windows folder installs an earlier version of the software, but it works with vista.

    The vista software does not.

  • How to download the image of the device using javascript

    Hi all

    I developed the web application. In I want to download the image in the folder in my possible device.if blackberry please give the code for me. Thanks in advance...

    Kind regards

    Marimuthu_P

    I did it with PhoneGap and their API FileTransfer long ago.

    I think he uses XHR - here's a great article on how to do several things with XHR and HTML5: http://www.html5rocks.com/en/tutorials/file/xhr2/

  • Discovery of the devices using CNA

    Hello

    I downloaded ANC 5.7.5 and try to create communities with our network devices.

    Even if I enable https on my devices, why the discovery would fail? We have disabled http on these devices. at the point where I have activate http, we get discovered

    Could you please help?

    Thank you

    You are welcome. Please enter your message as answered and so useful rate.

  • EditField: protected boolean insert (...) not called if the device uses VirtualKeyboard

    Hi all

    I extend the EditField class to intercept the entries of tank / backspaces and do something. I would outweigh all the methods of the superclass:

    protected boolean insert(char arg0, int arg1);
    public int insert(String text);
    protected int insert(String text, int context);
    
    protected boolean backspace();
    protected int backspace(int count, int context);
    public int backspace(int count);
    

    I tried on a 8520 (which has a physical keyboard) and the methods overridden were correctly when you type something in the field. However, this is not the case on a touch device (tried on a 9380). In this case the text is typed and showed correctly in the EditField custom, but not the method above is called never. I am quite confused...

    Is anyone of you know how to insert text in the virtual keyboard in the EditField? Is it possible to intercept these events?

    See you soon,.

    Beto

    The problem with keyChar and keyDown is that the char to insert depends on the keyboard layout, I didn't want to do something that it is already done by RIM.

    However, I have tried those overring however, but keyChar is never invoked, and keyDown gave place to a chariot double inserted in the editfield...

    In the end, I followed a suggestion made by @peter_strange in another post (I'll add the link if I managed to find it again) and put a FieldChangeListener on the edit field. When field changes, if the context is 0 (user action), I check if the text is changed and do what I have to do...

    Thank you.

    Beto

  • Question on the removal of the device using javaloader App: error Module is in use

    Hello

    I tried to remove the app inside using javaloader, but it shows error: the module is in use

    Use f as parameter

  • Cannot set the focus when reset the data using data sets

    Hi all

    When I click Reset button of the form. I would like to reset the data and then to focus on the first field. I can delete the information I've provided but setFocus in the name of the first field does not work. Help, please.

    I use datasets to reset data.

    Here is my code:
    event: click on

    xfa.datasets.data.loadXML ("< form1 / >", true, true);

    xfa.host.setFocus ("xfa.form1.contactInformation.firstname")

    Thank you

    Cindy

    Put the setfocus on the form event: loan of form1

  • I get the message 'the' device name' cannot be stopped because a program accesses still it."when using safely remove hardware program.

    Trying to read an external drive "Xcraft", by chance the power supply cable was disconnected. I ' v ereconnected the cable and try to remove the device using the ' renove safely» The unit is not stopped after selection and | I get the message 'the' device name' cannot be stopped because a program is accessed again. ' Y at - it patches or wrap-around work. Just, I can't access the drive. Appreciate any help.

    Try this and see if you can get it to unlock. If it does not just try to restart your computer without USB drive.

    The download is from Microsoft so it's safe!

    Good luck!  Please rate me upward if you find my post helpful. Thank you!

  • HttpDateParser using the device of time zone

    When the device Simulator is set to Timezome Casablanca GMT, HttpDateParser analyse this ' 2009-07 - 21 T 16:30:30 - 07 "as 21 July 2009 16:30. Which is right. To this I can add the offset of the Atlantic time zone & get the exact time of NY.

    However, when I change the time zone in Brasilia (-3) it shows as on July 21, 2009 13:30.

    This mess up to my calculation for New York time. Is there a way to prevent the HttpDateParser do not use device time zone?

    I figured out a work-around for that... Thank you.

  • The card using PCI-GPIB hangs the system (Windows 7)

    Hello

    I am running Labview 11.0 (32-bit) on Windows 7 (64-bit) computer and card PCI-GPIB to communicate with instruments.

    Can I use GPIB to send commands to the device, but when I used "Measure and Automation" and analysis of the instruments he runs right first time, but if I scan again the system crashes completely (no reaction to any seizure).

    Same thing happens if I use I/O Assistant VI, I can get a response from the instrument and on the second call, the system hangs. Yet, I can send as many orders without any problem, so the source is in the reading stage.

    The PCI-GPIB card worked perfectly well for years on another computer running Windows XP.

    Someone already had this problem and what can be the source of it?

    I had a similar problem, but I just found out that the motherboard was not good...

    Try in another computer... Optionally, you can uninstall and install back the NI 488 drivers. 2...

    -Germain

  • Capture TV programs via the cable using the cable box and card Hauppauge

    I was doing fine record TV unencripted signal until comcast sent me a box of small encriptación. I have no problem with the help of the box to see the TV programs on a TV, but I can't get the Huappauge card to recognize the signal from the comcast box. I recognize the signal (without going through the box) an antenna that I decked out, but I can't work with the IR signal from the box that changes channels.  I have the cable extension IR remote with comcast box and also have an extension remote IR provided with the computer/hauppauge card.  It doesn't seem to be an outlet on the map, but there are three locations on the computer that are identified as IR Device Manager lists a Hauppauge Comsumer s infrared receiver and an infrared transceiver Microsoft e-Home installed without any indication of error.

    How can I get all those guys to play as a team, so I can schedule recording of TV programs again?

    CheckSix

    Photoray002;

    The Hauppauge WinTV HVR-1290 sends finally channel change commands TV Comcast decoder box and it is now possible to program the recorder.  I think that the main problems were a failure remote control Hauppauge and a very low external receiver.  It could also have been a few taken IR on the computer that could have internal corrosion of three years of inactivity.

    I found two sites that have helped significantly:

    http://support.HP.com/us-en/document/c01744910

    This site showed that the jury of IR extension on the back of the computer could be one of two different configurations - with and without electronics on the expansion card.  He had to open the case to determine where the design has been installed.  Mine was no electronics, but the indications I had followed guess an electronic sign.

    http://www.Hauppauge.com/site/support/support_faq_irblaster.html

    This site goes into detail about the implementation of the system using a set-top box.  I couldn't always installation to work because the statement strongly relied on the Hauppauge remote control.  But I noticed in the comments to the screen, another way to use the keyboard rather than the Hauppauge remote control.  Better easier to identify the box system is the first option.  The program will redirect you to point the remote very close to Comcast (touch) to the external IR receiver and press a particular key.  If the receiver receives the signal, it will be a very small red light flashes in the receiver. You may need to move the remote to the receiver to get this light. Once the box is identified the process of implementation of the signal is simple although there will be a lot of channels identified.  You can uncheck the channels that you don't want or you can deselect all channels and the select only the channels you want.

    Thank you for your help. He made me go in the right direction.

    CheckSix

  • Fastest way for debugging on the device of JDE

    Hi all

    I'm new to the development of BB and struggling to find a way to debug on device effectively.  My application has a lot of comm of bluetooth in him so most debugging should occur on the device instead of Simulator (please, correct me if this is not true).  Here's my development/debugging process.

    1. change the code

    2. generate the code

    3. the signal code

    4. connect device to Desktop Manager via the USB cable

    5. delete a previous version of my application

    6. load the latest version of my application

    7. connect to the device using JDE

    8. install a device app

    My quesitons are...

    1 should I sign the code whenever I have rebuild?

    2. is there a more effective way to get the latest version on the device instead of uninstalling then reinstall via Desktop Manager (it takes forever).

    There MUST be a better way.  Thanks in advance to all those who answer.  =)

    1. Yes, you sign cod every time after reconstruction you have for debugging on the device.

    2. you can load application in the device in various ways. If you use the Desktop Manager, you need to go if the steps you mentioned.

    But most developers use javaloader (JDE bin directory) to get the latest version in the device during development.

    To do this, run the following command from the bin directory:

    JavaLoader-u load applicationName.cod

    Also take a look at the article for details on loading the application on the device.

    http://www.BlackBerry.com/knowledgecenterpublic/livelink.exe/fetch/2000/348583/800708/800647/How_To _...

    Concerning

    Bika

Maybe you are looking for

  • How can I stop Adobe flash to open on my computer?

    When I go to some sites, Adobe Flash plugin opens many ads and it tops out at my CPU. How can I prevent A F plugin to work when I go on these sites?I looked at the list of the plugins below and want to remove most of them. How do I do that?

  • Color question

    In the Inspector, I see that my policy is colored. However, in the fact change the view, that it does not show the color. If export you it, it also appears in the favorite color. But when editing, the text is white. I think it's in the setting of an

  • Regex find number at end of string

    Hi guys,. I try to learn regex, but it's hard and I'm stuck to a simple task: Let's say I have this string: "C1". I would like to find what is the number to the end of the line. I can do with this regular expression ' [0-9] + $". Now if this chain wa

  • WINDOWS XP PROFESSIONAL NETWORKING PROBLEM

    whenever I try to connect to the other computer on my network, the window opens asking for the password set by the other computer, so that no password is defined by the other computer. ANOTHER COMPUTER CAN BROWSE MY SHARED FOLDER BUT UNABLE TO CONNEC

  • Windows xp does not recognize the hp c6180 photosmart printer

    My windows xp does not recognize my hp c6180 photosmart printer