[c-nsp] Cisco logging commands

Phil Mayers p.mayers at imperial.ac.uk
Tue Dec 8 06:28:49 EST 2009


Henry-Nicolas Tourneur wrote:
> I'm not willing to use Tacacs+ because I'm setting-up a new server 
> environment and I don't want
> to need to manually compile tac-plus and get broken dependencies after 
> an upgrade.

Statically compile it?

> 
> Using tac-plus from the APT would be far more easier, unfortunately, 
> it's not available any more.
> And, we are not interested in purchasing a Cisco ACS product just for 
> doing what tac-plus does.

Cisco IOS *DOES NOT SUPPORT* radius for per-command authorization so a 
radius server will not do what you want.

Tacacs is your only option.


More information about the cisco-nsp mailing list