Re: [j-nsp] Using TACACS to prevent deactivate/activate statements?

2008-11-10 Thread Erdem Sener
Hello, As far as I know, the activate/deactivate knobs are tied to user's permissions; meaning that if an user can edit a level of the configuration he/she can also always use activate/deactivate; since they're not really 'commands' from that perspective. (again, I may be wrong) Another option

Re: [j-nsp] Using TACACS to prevent deactivate/activate statements?

2008-11-10 Thread German Martinez
On Tue Apr 22, 2008, Brian Pavane wrote: Hello Brian, Did you have any luck with this task? Anything that you are willing to share is really welcome Thanks German > I am currently working on a security profile, that requires me to > prohibit certain deactivate/activate commands to be issued by

[j-nsp] Using TACACS to prevent deactivate/activate statements?

2008-04-22 Thread Brian Pavane
All, I am currently working on a security profile, that requires me to prohibit certain deactivate/activate commands to be issued by a certain class of users. I am looking to add this to my current TACACS configuration (tac_plus), however I have been unable as of yet to get the router to prop