40-26
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 40 Configuring Management Access
Configuring AAA for System Administrators
Figure 40-3 Disallowing Arguments
•
When you abbreviate a command at the command line, the ASA expands the prefix and main
command to the full text, but it sends additional arguments to the TACACS+ server as you enter
them.
For example, if you enter sh log, then the ASA sends the entire command to the TACACS+ server,
show logging. However, if you enter sh log mess, then the ASA sends show logging mess to the
TACACS+ server, and not the expanded command show logging message. You can configure
multiple spellings of the same argument to anticipate abbreviations (see Figure 40-4).
Figure 40-4 Specifying Abbreviations
•
We recommend that you allow the following basic commands for all users:
–
show checksum
–
show curpriv
–
enable
–
help
–
show history
–
login
–
logout
–
pager
