[c-nsp] switchport trunk allowed vlan

Tim Durack tdurack at gmail.com
Mon Nov 1 08:16:10 EDT 2010


On Mon, Nov 1, 2010 at 7:58 AM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
> On 31/10/10 15:39, Keegan Holley wrote:
>>
>> If you are simply trying to disable a command have you thought about doing
>> so in tacacs?  It sounds like it would be simpler and it also has the
>> benefit of being centralized so you won't need to configure it on each
>> individual router.
>
> It also has the disadvantage of being centralised, so each router has to be
> configured to talk to a central point-of-failure.
>
> :o)
>
> +1 for wanting to disable this w/o TACACS

Exactly. In my book, "simple" = less operational dependencies. (Plus
configuration management system carries the burden of making these
changes anyway.)

-- 
Tim:>



More information about the cisco-nsp mailing list