Using TACACS+ comes to mind... this is what I ended up using. It is possible to do something like this with the privilage commands but it was not "granular" as TACACS. For example, I have a config set where the user can do sho ver, connect, disconnect and couple of other commands. Nothing else.. they get a message that the command is not authorized.
Perhaps someone else has a more elegant solution :) MikeS IT Guy wrote: > > Hi guys, > > Need your help to setup my Access server. > I need to setup My Access server router(16 ports) such that two > different > users can get different access rights when access the Rack > routers > (different routers)thorugh these Access server. > For example I want User-A to give access to only Basic mode and > restric him > by using enable mode or seeeing any configurations in Access > server. > On the other hand, I want other user to have full access.. > > Any idea how to setup this?? > > Thanks for help > > Tom > > _________________________________________________________________ > Get your FREE download of MSN Explorer at > http://explorer.msn.com/intl.asp > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27454&t=27437 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

