[c-nsp] Customer access to PE

[Trey Howland]

I have a scenario where a customer wants CLI access to the PE in the 
provider's network.  This access would allow the customer to 
create/delete VRFs, configure interfaces/sub-interfaces, configure VRRP, 
etc.  All CLI access would be controlled by TACACS to limit the customer 
to specific commands.

So my question is:  does anyone have examples where this is done today?  
In a corporate environment between business units?  Looking for examples 
where this has been successful or unsuccessful.

v/r,
Trey