[98301] in North American Network Operators' Group
Cisco Interface configuration control
daemon@ATHENA.MIT.EDU (Sean Figgins)
Wed Aug 1 21:54:46 2007
Date: Wed, 01 Aug 2007 19:53:44 -0600
From: Sean Figgins <sean@labrats.us>
To: nanog@nanog.org
Errors-To: owner-nanog@merit.edu
I'm looking to see if anyone has used the "privilege" configuration
options on Cisco routers and switches to control interfaces that users
are allowed to configure.
I'm looking to allow a certain set of our users to only configure a set
of interfaces, while allowing our top-level operations guys to configure
all interfaces. Today, we accomplish this through tacacs, but we are
looking at some hardware that will have conflicting interfaces.
Is anyone doing specific interface configuration control on Cisco devices?
-Sean
