Giving access to privilege mode or giving access to few commands

We have a site to site vpn tunnel for different offices and we usually use taacs for username and password and we want to give privilege level access to few people. and access to only few commands in privilege mode using the same tacacs password ,, through cli and asdm?
Can you kindly help me with this
Thnx much

Please check this link,
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml
You need to setup command authorization.
Regards,
~JG
Do rate helpful posts

Similar Messages

Database access only authentication mode don't access in windows mode.

Hi, I Had create new database in sql server authentication mode but don't access in windows mode how, only show authentication mode not show in windows mode .

Can you rephrase the question. I'm trying to determine what the exact question is, but I'm unsure.
Are you asking of you can configure an SQL Server only accept logins using SQL Server authentication and not Windows authentication, for instance?
same here
and also the thread title talks about "database authentication"
Andreas Wolter (Blog |
Twitter)
MCSM: Microsoft Certified Solutions Master Data Platform, MCM, MVP
www.SarpedonQualityLab.com |
www.SQL-Server-Master-Class.com

Using a Report Filter without giving users access to "Design" mode

I have a report in which I use the filter bar to provide my end users the ability to use a drop down menu to switch between different months worth of data. However, I have been asked to disable the ability for users to access the Design mode. I have been unable to come up with the right security settings to allow the report filter while disabling the Design mode. Does anyone have any suggestions to this problem?
BO XI 4.0 Patch 9
Thanks very much for your help

Hi,
I'm familiar with your issue - described here BO4 navigate the available object in READING MODE in webi
and also here: Hide/Disable DESIGN MODE on WebI (BI4)
I've every reason to believe this is currently not possible. You may want to vote on the existing Enhancement Requests in Ideas Place, or create your own
Regards,
H

Timeout on System Bus in privileged mode from CPU0 Data access

Dear PCI developers,
I have designed my PCI card working on SUN platform.
During the operation of my PCI card, the system unconditionally
rebooted and left the following message in /var/adm/messages.
I guess the following messages are related to my PCI card,
but still I don't know what caused the problem.
------------------- parts of /var/adm/messages ----------------
WARNING: [AFT1] Timeout on System Bus in privileged mode from CPU0 Data access at TL=0, errID 0x000003e4.3b20a9c5
AFSR 0x00000000.88000000<PRIV,TO> AFAR 0x000001ff.80031a00
AFSR.PSYND 0x0000(Score 05) AFSR.ETS 0x00 Fault_PC 0x1031ae7c
UDBH 0x0000 UDBH.ESYND 0x00 UDBL 0x0000 UDBL.ESYND 0x00
Is there anyone with some idea about it?
The system configuration of my system is as follows.
Solaris 8 64bit version, SUN Ultra60,
PCI card provides only PCI slave operation, i.e., software
read from/write to PCI card. (no master operation)
Thanks.
YSKWON.

Dear PCI developers,
I have designed my PCI card working on SUN platform.
During the operation of my PCI card, the system unconditionally
rebooted and left the following message in /var/adm/messages.
I guess the following messages are related to my PCI card,
but still I don't know what caused the problem.
------------------- parts of /var/adm/messages ----------------
WARNING: [AFT1] Timeout on System Bus in privileged mode from CPU0 Data access at TL=0, errID 0x000003e4.3b20a9c5
AFSR 0x00000000.88000000<PRIV,TO> AFAR 0x000001ff.80031a00
AFSR.PSYND 0x0000(Score 05) AFSR.ETS 0x00 Fault_PC 0x1031ae7c
UDBH 0x0000 UDBH.ESYND 0x00 UDBL 0x0000 UDBL.ESYND 0x00
Is there anyone with some idea about it?
The system configuration of my system is as follows.
Solaris 8 64bit version, SUN Ultra60,
PCI card provides only PCI slave operation, i.e., software
read from/write to PCI card. (no master operation)
Thanks.
YSKWON.

How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

The Guest Network function of the Time Capsule and AirPort Extreme cannot be enabled when the device is in Bridge Mode. Unfortunately, with another router...the Telus...upstream on your network, Bridge Mode is indicated as the correct setting for all other routers on the network.
If you can replace the Telus gateway with a simple modem (that performs no routing functions), you should be able to configure either the Time Capsule or the AirPort Extreme....whichever is connected to the modem....to provide a Guest Network.

How do i reset admin password. no disc but system automativally logs me in as administrator and can access root user mode

I recenly got this macbook, MA&00LL/A, max OS X, V:10.4.11, 2GHz IntelCore 2 duo, 2GHz, When I power up it automatically logs me on as administrator but prompts for password when I try to access/change certain features. I got the macbook from my cousin who has forgot password and has lost disc. I can access root user mode but as iam unfamiliar with apple I am hesitant to delete anything without making things worse. Is their anyway I can reset this admin password without the disc or simply delete this user and reconfigure system as myself as administrator. step by step instructions would be appreciated at this stage till i familiarize myself more. Any help would be greatly appreciated. If it came down to buying a disc, how much roughly do these cost??? thanks again

If you don't have your install disks you can get the 10.4 gray disks by calling Apple Store Customer Service at 1-800-676-2775 They can send them to you for about $16 per disk plus S & H. Just give them your serial number and they'll know which ones you need.
To find your serial number go to the Apple in the upper left corner and select About This Mac, then click on More Info, the System Profiler will then come up. The Serial Number (System) is down near the bottom of the Hardware Overview list.
If you don't have your install disc handy,then follow these steps
1. Start up in single-user mode (hold Command-S as thecomputer starts up).
2. Type: mount -uw /
3. Press Return.
4. Type this: passwd (user's short name) Replace "(user's shortname)" with the short name of the user account whose password you wish to reset. If you are not sure what the account name is, you can get a list of usernames by typing: ls /Users
5. Press Return.
6. Enter a new user password.
7. Press Return.
8. Type: reboot
9. Press Return.

MOD not giving up correct values

Hi everyone,
I am having problem on using MOD in Director, i wrote the
following in director:
put (3054452055 mod 16)
-----giving result "-9"
The value/result it gives me is not correct. It should be
"7". But director is giving me "-9".
So, the same thing i did in FLash by just simply putting the
following:
trace(3054452054445%16);
and it gives me correct answere.
So, i want to know why Director is mis calculating the simple
calculations ??
Amir

If I'm remembering correctly, the cause of your problem is
that lingo ends up returning strange negative numbers if the result
of your equation is greater than a certain number (Often it's
-2147483647 but I suppose it could return -9 because of the MOD
part of the equation) You can find more information on this
here.
Best of luck,
Johnathon

XP Mode Crashes When Accessing Network Shares

I am using Windows 7 Professional and have installed XP Mode to use a legacy accounting application.
In the Virtual Machines folder on the host under settings I have set the network adapter to Realtek PCIe GBE Family Controller.
Under XP Mode, I have set XP to be a member of the workgroup and I am logging on with a user who can access network. When I run XP Mode I can access the internet with Internet Explorer.
If I then go to "My Network Places" "View Workgroup Computers" I can see all the workgroup computers on the network. If I then double click on a computer name Windows Explorer shows me all the shared directories on that computer.
This is where the problem occurs. If I then click on a shared directory XP Mode instantly exits and restarts. (Windows 7 is unaffected.)
Does anyone have any idea's as how I can access all the shared directories to view the files stored on the network.

Miya Yao, Thank you for your reply.
Can other computer in the workgroup see the shared directory in Windows XP Mode? I don't know exactly what you mean by this. No other computers in the workgroup are running XP Mode. They are running native XP Professional. (It was my original idea to run
a physical XP laptop together with Windows 7 desktop to access the data files required, before I read about XP Mode.)
All workgroup computers can access network shares, if the user has appropriate permissions. I have shared the "Shared Documents" under XP Mode and this share can be accessed by all other computers on the network including the host. However, if I access this
share from the guest via "View Workgruop Computers" as in my first post, XP Mode instantly quits and restarts. For information the XP Mode user name and password is the same as the host user name and password.
I have checked the Event Viewer both before I first posted and again today. There are no entries recorded. However, I should have mentioned that upon restarting XP Mode I get "The system has recovered from a serious error" the details of which are:-
BCCode : 10000050 BCP1 : FFFFFF8A BCP2 : 00000001 BCP3 : F7F23661
BCP4 : 00000000 OSVer : 5_1_2600 SP : 3_0 Product : 256_1
If I send the error report I am taken to thsi web page:-
http://wer.microsoft.com/responses/Response.aspx/603/en-us/5.1.2600.2.00010100.3.0?SGD=316378af-10a1-428a-9016-074d398ed1a1
The page talks about testing RAM. RAM is fine. There is 8GB of physical RAM. It was tested with memtest86+ v2.10 and v4.20 separately. v4.20 was run for 12 hours plus with no errors detected. I have tried adjusting XP Mode RAM under settings but this makes
no difference.
The issue happens when accessing all shared directories including empty ones.
I clean booted the computer and yes the issue still exists.
If I use dos to view a directory under XP Mode the problem exists, by typing
\\SERVER\SHARE\FOLDERNAME .
By using the host I can map a shared directory. Then under XP Mode I can access the share from my computer. I have noticed by mapping S: to a Network Share that in Windows Explorer in XP Mode the path is
\\tsclient\S\ . Is this normal?
Under Windows 7 the same share appears as S:\ as I would expect.
However, I would prefer not to have to map and un-map different Network Shares to drive letters.
It should have been mentioned in my first post, host is Windows 7 Professional 64 bit. I don't know the build but it is full retail version (not upgrade) from when first released - prior to SP1. All updates have been applied including SP1.
Any help would be appreciated.
Thanks.

Guest access in bridge mode

I want to set up a secure wireless network in our small office that will also allow clients to access the internet while in our waiting area. I also want to maintain our current wired network, which is connected to the internet through a Nortel router, connected to a DSL modem. Where would the Airport extreme be installed? - i.e., upstream or downstream from the router? Also, looking over Apple's network documentation, it appears that the Airport Extreme would be in Bridge mode when configured on an existing ethernet network with router, but the documentation is clear on the issue of setting up guest access in this kind of configuration.
In case you have not guessed, I am not an IT guy, so will be grateful for any helpful suggestions

Blind Lemon wrote:
I want to set up a secure wireless network in our small office that will also allow clients to access the internet while in our waiting area. I also want to maintain our current wired network, which is connected to the internet through a Nortel router, connected to a DSL modem. Where would the Airport extreme be installed? - i.e., upstream or downstream from the router? Also, looking over Apple's network documentation, it appears that the Airport Extreme would be in Bridge mode when configured on an existing ethernet network with router, but the documentation is clear on the issue of setting up guest access in this kind of configuration.
Guest access and bridge mode are incompatible on AirPort base stations. I'd connect an AirPort Extreme to your DSL modem, connect your wired network connections to the Ethernet ports of the AirPort Extreme, and take the Nortel router out of service. Depending on how many wired connections you need, you may also need an Ethernet switch. Besides the WAN port, an AirPort Extreme only has three available Ethernet ports.

When I access Editor the mode is set on EXPERT will not change to GUIDED or QUICK. Pages overlap.?

When I access Editor the mode opens at EXPERT and will not change to QUICK or GUIDED. Pages seem to overlap and preclude access to the left hand task menu. The operation freezes and the only solution is to cancel the task in Task Manager. HELP!! illidgew4742172

Good day!
Are you talking about Photoshop proper?
If not please refer to the appropriate Forum, if yes please post a screenshot to clarify the issue.
Regards,
Pfaffenbichler

IPad doesn't go into sleep mode when guided access is enabled

My iPad doesn't go into sleep mode when guided access is enabled despite having set "enable sleep mode" to on in the settings menu. COnsequently, my battery life drains very quickly during the day as the screen doesn't dim or go into sleep mode at all. Help!

Seems this feature is lost with iOS 7.0.4. I just bought 4 iPod Touches for employee use and NEED to have sleep mode enabled for guided access to conserve battery life.
I did have 1 iPod that allowed me to enable sleep mode (and I tested that it allowed the top button to be pressed to immediately go to sleep), then after it ran the 7.0.4 upgrade it no longer allowed sleep mode when in guided access (I did not check the original version of iOS on the iPod but it was obviously older than 7.0.4).
Is there some new hidden way to turn this on or did Apple delete the option?

My ipod is getting stuck on startup and i cannot even access the recovery mode. what can i do to resolve this problem?

Hi.
My ipod touch 5 is getting stuck on startup and i cannot even access the recovery mode.
what should i do to resolve this problem?

Try what you missed here:
- iOS: Not responding or does not turn on
- Also try DFU mode after try recovery mode
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
- If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
- Try another cable
- Try on another computer
- If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
Apple Retail Store - Genius Bar

Login to directly into "privilege mode"

Hi All,
I have created users and given them telnet access to router 7200.
They have full privilges(15) but everytime they login they login into user-exec mode instead of privilege mode.
Is there a way to skip user-exec mode and allow the users to login directly into privilge mode so they dont have to enter password twice?
Thanks!!

Opening a new thread might be a good idea - though at this point we have gone far enough (and I am not sure how much further this discussion will go) that we might as well just continue this thread.
While IOS devices have mechanisms that will allow you to configure that a user goes directly into privilege mode I do not believe that this works on the ASA - at least for the command line. If you login to ASDM to manage the ASA you will go directly to privilege mode. But for command line (SSH, telnet, etc) you will go to user mode and be required to enter another password for privilege mode. I do not know a way to get around that for ASA command line.
HTH
Rick

Safari and firefox stop working after a few minutes of browsing, regardless of what site I'm on. I have to restart my computer to get internet access again but it only works for a few more minutes, then I have to restart again. Please help!

Safari and firefox stop working after a few minutes of browsing, regardless of what site I'm on. I have to restart my computer to get internet access again but it only works for a few more minutes, then I have to restart again. I don't get a spinning ball, it just stops working at whatever page it's on. I can close the program just fine but when I re-open it, either safari or firefox, it freezes trying to load the hompage. This started a few days ago after trying to stream a movie on my computer. I'm on a Mac Air OS X Version 10.6.8 and have downloaded all updates. When I go into finder, it says I have over 80 gigs available. Is there some other memory cache that I need to check? Thanks so much for your help.

ejwoodall wrote:
It's not a router problem as I explained in my post. If it was a router problem then I wouldn't have the problem everywhere I go. It is an issue with the software.
Then I guess the millions of people running 10.5.7 with no issues are just hallucinating that their machines are working fine?
I'm not trying to belittle your issues; you're certainly having them and I know first hand how annoying an intermittent AirPort issue can be. (In fact, mine was due to an AirPort driver bug that no one else seemed to suffer from.)
The single best diagnostic you could do is take your system running 10.5.7 to an Apple Store, and try using their in-store network.
If your machine performs flawlessly, it may be a router issue.
If your machine has connectivity issues there, it may be a hardware problem with your machine.
There have been numerous people in multiple threads over the years who swore that an update was buggy because things used to work, but returned later to sheepishly admit that they took their machine in, a problem was found and fixed, and now their Mac works flawlessly with the newer software.
But simply reinstalling 10.5.5 in no way means the explanation of how firmware bugs may be at play here is incorrect.
In the context of that explanation, all you've done is possibly reinstall software that asks to add "2 + 3."

Remote Access VPN, no split tunneling, internet access. NAT translation problem

Hi everyone, I'm new to the forum. I have a Cisco ASA 5505 with a confusing (to me) NAT issue.
Single external IP address (outside interface) with multiple static object NAT translations to allow port forwarding to various internal devices. The configuration has been working without issues for the last couple years.
I recently configured a remote access VPN without split tunneling and access to the internet and noticed yesterday that my port forwarding had stopped working.
I reviewed the new NAT rules for the VPN and found the culprit.
I have been reviewing the rules over and over and from everything I can think of, and interpret, I'm not sure how this rule is affecting the port forwarding on the device or how to correct it.
Here are the NAT rules I have in place: (The "inactive" rule is the culprit. As soon as I enable this rule, the port forwarding hits a wall)
nat (inside,outside) source static any any destination static VPN_Subnet VPN_Subnet no-proxy-arp route-lookup
nat (outside,outside) source static VPN_Subnet VPN_Subnet destination static VPN_Subnet VPN_Subnet no-proxy-arp route-lookup
nat (outside,outside) source dynamic VPN_Subnet interface inactive
object network obj_any
nat (inside,outside) dynamic interface
object network XXX_HTTP
nat (inside,outside) static interface service tcp www www
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx 1
Any help would be appreciated.

Try by changing the nat rule to nat (outside,outside) after-auto source dynamic VPN_Subnet interface
With Regards,
Safwan

Giving access to privilege mode or giving access to few commands

Similar Messages

Maybe you are looking for