Cisco Systems Servers Server User Manual


 
Chapter 5 Setting Up and Managing Shared Profile Components
Command Authorization Sets
5-16
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Step 7 For each command you want to enter as part of this command authorization set,
follow these steps:
a. In the box just above the Add Command button, type a command that is to be
part of the set.
Note Enter only the command portion of the command/argument string
here. Arguments are added only after the command is listed. For
example, with the command/argument string show run you
would type only the command show.
b. Click Add Command.
Result: The typed command is added to the command list box.
c. To add an argument to a command, in the command list box, select the
command and then type the argument in the box to the right of the command.
Note The correct format for arguments is <permit | deny> <argument>.
For example, with the command show already listed, you might
enter permit run as the argument.
Tip You can list several arguments for a single command by pressing Enter
between arguments.
d. To allow arguments, which you have not listed, to be effective with this
command, select the Permit Unmatched Args check box.
Step 8 When you are finished adding commands and associated arguments, click
Submit.
Result: Cisco Secure ACS displays the name and description of the new command
authorization set in the applicable Command Authorization Sets table.