How to hide line console parameters through Cisco ACS

Hi,
Can any one of you please help me in the following scenario ?
I want to hide the line console, line aux and line vty configuration parameters of the cisco devices based on user level privillages through Cisco ACS. For example, if a user logs into the devices with privilege level 7, then he should not be able to see the line paramenters on the cisco devices for which he had privilege level 7 access.
Can you please help me out how to achieve this?? Your help in this regard is highly appriciated.
Thanks

This thing is possible with local authorization on IOS device. With ACS this is not possible.
In acs you can set what all commands a specific user can issue. That feature is called command authorization.
For show run you need to give priv 15. ACS works in a different way if you compare it with setting up local priv lvls on router/switch.
Best way to set it up is to give all user priv lvl 15 and then define what all commands user can execute.
Note : Having priv 15 does not mean that user will able to issue all commands.
We will set up command authorization on acs to have control on users.
This is how your config should look,
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa authorization config-commands
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml
Regards,
~JG
Do rate helpful posts

Similar Messages

Hide line art seen through upper layer line art?

I'm doing a t-shirt illustration and I need the line-art to overlap, remain transparent (no fills) and not see the line art behind through the front line art. If I have two shapes overlapping, I don't want the illustration behind to be seen through the front illustration. I can't use a fill on the front art, because I need to maintain transparency on all the artwork so that the t-shirt color shows through. In Photoshop, I would simply mask away the bottom layer areas I wanted to disappear. I don't know how to do this in illustrator. I'm working in CS4 and I am a newbie. Any help would be appreciated.
In the example below, the gray circle is in front of the white circle. I want the intersecting area inside the gray circle to be clear so that I do not see the section of the white circle contained within. I can't use a fill because I need both circles to remain clear so the fabric of the t-shirt shows through.

I can't use a fill on the front art, because I need to maintain transparency...
That depends on how the T-shirt is going to be printed. For example, if the design you've shown is going to be screen printed on a gray shirt (as your screenshot implies), you could simply:
Define a dark gray spot color Swatch and apply it to the left circle.
Define a light gray spot color Swatch and apply it to the right circle.
Fill the left circle with the default white swatch.
In screen printing, you need to think in terms of inks, not colors.In a program like Illustrator, white means "no ink." The design would be printed as color separations. There would be no "white" separation unless you defined a white Swatch as a spot color and used it.
JET

How to hide line in Oracle 6i Reports

Hi All,
I have developed new report, in the report i need to hide line, at the timing of printing line should not print.
Can any one help me this issue.
Siva

Siva,
in the report i need to hide line, at the timing of printing line should not print.If you do not want to print the line at all the times, then you can just remove the line. But if it is a border of a field or frame, which you do not want to print, then click on the field (or frame) which is causing the issue, and click on 'Line Color' button which is on the left side panel. And within that click on "No Line".
Hope this helps.

How can I add a field in Cisco ACS 3.3 with VLAN?

I'm trying to do Dynamic VLAN Assignment, could you describe what's the best way?
and if possible, how do I set the VLAN fiedl in ACS?

Well it depends on whether your access device supports it.
Aironet APs support mac auth, where you put mac addresses instead of userids into ACS.
In NAC, to authenticate clientless endpoints, the switch/router has a feature called "mac auth bypass" where a pre-configured userid+password is sent to ACS along with the client mac address. ACS then applies NARs to filter on mac address.
Its a shame ACS doesnt have a true mac authentication feature.
So the answer really depends on your access device.

How to pass the report parameters through java not by using URL

Hello...
I have an oracle App. Server 10g with report service
I can the report using the URL :
http://host:Port/rwservlet/report=....
and passing the report parameters ...
But is there any way to call the report by pdf format and passing the parameters from java without using the url ???

thank you shahcsanjay for your reply
but I think that web.showDocument can not be used by ordinary java web application ..
I think it can be used only with with "oracle forms" Am I right ?
If no can you please tell me where can I find a useful document about how to use web.showDocument ...
thanks again
Saleem

How to hide standard application toolbar through config?

Hi,
My requirement is to make the transaction SWIA available in CRM WEB UI and to hide some buttons from the application toolbar like the execute Work Item, display Workflow Log buttons and few more. Is there a way i can do it through cong?

You can use transaction variants.
[http://help.sap.com/saphelp_nw04s/helpdata/en/67/232037ebf1cc09e10000009b38f889/frameset.htm]
Your fist step will be to execute transaction SHD0 and create a transaction variant for SWIA. Then you can create a Z transaction (ZSWIA) that will call SWIA with the transaction variant you have just created.

How to launch java console window through commandline?

Dear All,
Do you have any idea to launch Java Console window when we enable show console option enabled in Control Panel?
Regards,
Amit

I captured commandline from tskmanager process which are given below:
-Xbootclasspath/a:"%ProgramFiles%\Java\jre7\lib\deploy.jar"?"%ProgramFiles%\Java\jre7\lib\javaws.jar"?"%ProgramFiles%\Java\jre7\lib\plugin.jar" -Djava.class.path="%ProgramFiles%\Java\jre7\classes" -D__jvm_launched=112884004330 -D__applet_launched=112884002933 -Dsun.awt.warmup=true -Djnlp.packEnabled=true sun.plugin2.main.client.PluginMain write_pipe_name=jpi2_pid10868_pipe6,read_pipe_name=jpi2_pid10868_pipe5
but this throws errors.

How to exec command with parameters through runtime.exec()

im trying to run a command prompt passing in parameters. Right now im creating a .bat file like this
c:
cd C:\SOMEDIR
ant deploy moreparameters
and then passing in the file name into the exec command. It is running fine but im trying to use the runtime.destroy() command and it doesnt close the ant command, it only closes the bat file which was already closed. Is there a command I could pass into the exec() method to run the ant command with the parameters without using a bat file?

im getting a CreateProcess: ant deploy -Dswasm=swasm error=2
When i try to do
cmds[0] = "ant";
cmds[1] = "deploy";
cmds[2] = "-Dswasm=all-bs";
Process p = runTime.exec(cmds, null, new File("C:\\Program Files\\apache-ant-1.6.1\\bin"));
its like it cant find ant. But it finds java command fine. What should i pass into the second parameter, it says "If envp is null, the subprocess inherits the environment settings of the current process. " Does that mean it will take the window system enviroment variables? if not what string would i pass in to set where ant is?

Passing User Parameters through Run_Report_Object

hi,
How to pass multiple user parameters through run_report_object.example i have to pass 20 parameters, have i write 20 statements? is there any way to come in single statement.i am using Forms 6i.
thks in advance,

A parameter list can be the second parameter of RUN_REPORT_OBJECT,
rjob := RUN_REPORT_OBJECT(rep_id,paramlist_id);
Gerald Krieger

Cisco ACS check for AD

Hi,
Is there any way to check that the Users were authenticated by AD through cisco ACS 4.2, I have deploy the Cisco ACS 4.2 with WLC 5500, now i have to check whether the user are authenticated by ACS or AD kindly guide me how i check it.
all users were connected and authenticated having domain user.
i am confuse whether ACS authenticate users from internal database or from AD.
Kindly help me..... ill b very thankful to you.....
M.Bilal Iqbal

Ok if you have a user set up in ACS in a group and it is marked "windows" its getting sent to AD to get authenticated. Did you check your pass logs ? There is a field called database. This should show you if the user is ACS or AD. If its AD it will have the name of your domain (that was set up in ACS).

Cisco ACS 5.1 Tacacs with Juniper Srx 210

Hi all,
I am trying to do authentication for Juniper SRX 210 FW With Cisco ACS 5.1 Tacacs but I am unable to acheive it ..
Can any one help me how to add Junos service in ACS 5.1..How to Intergarte Juniper SRX 210 in Cisco ACS 5.1

Hello Pranav
As Nicolas said, you really need to know what attributes Juniper SRX is using. It also depends on what you're looking for, for example it's very different "password authentication" from "command authorization". I answered a similar question here https://supportforums.cisco.com/thread/2111466
You don't need to enable any new service. ACS is capable to attend any TACACS (or RADIUS) device as long as you tell ACS what are the TACACS (or RADIUS) attributes needed for that device.
This is an example in which I have configured ACS 5.x with an attribute called "local-user-name" which JunOS router use for authentication. For that you need to go to "Policy Elements > Authorization and Permissions > Device Administration > Shell Profiles".
If you don't know the attributes you can capture the packets and troubleshoot from Juniper cli and from "ACS view" side. That's how I find out the "local-user-name" attribute.
Please rate if it helps. Kind regards

How to hide dynamic parameters values in the URL with Reports 6i

Hi,
I want to know a way of hiding the parameters values when asking for a report through the web.
Now I'm using the Reports 3.0.5.8 with a Cartridge defined in the Oracle Web Application Server 3.0.1.0.1. When you ask for a report with the parameters DESTYPE = cache and DESFORMAT = pdf, it is fully generated and in the Address or Location box of the browser, you can see http://webserver/cache/report.pdf (where cache is the virtual directory defined in the OWAS in which the .pdfs are cached). So, users cant see the Url used to generate the report.
Im trying to upgrade this configuration to Reports 6i with Cgi in a web server. I generate reports with no problems. The problem I have is I cant find how to hide the parameters values as before. I mean, when I ask for a report, once its generated I can see http://webserver/cgi-bin/rwcgi60.exe?server=ServerName&report=report.rdf&userid=user/pass@connection&destype=cache&desformat=pdf&P1=value1&P2=value2 in the Location box. It allows user to ask for another report changing the values of the parameters. I use these parameters to execute some query written in the Data Model. For example, imagine that the P1 represents the company id, the user (that is supposed to see only data of its company) can change this id, ask for a new report and see data of another company.
Ive already tried to use the key mapping option, but its not useful to me because the parameters values are dynamic and its impossible to define different entries in the cgicmd.dat for each possible value. The option of loading the parameter form before running a report is not useful to me either, because there exists specific screens for this purpose.
Is there any solution?
Thank you.
Marma Bonfiglio.

Hi Rakesh,
I am using BI 7.0
The last option I have is 'Hide' for 'Calculate single values as' .
I have the below options for 'Calculate single values as'
1. Normalise according to Next group level Resul.
2. Normalize according to Overall Result
3. Rank number
4.Olympic Rank Number
5.Maximum
6. Minimum
7.Counter for all detailed values
8.Counter for all detailed values that are non zero
9.Moving average
10.Moving average That is Not zero ,null or Error
11. Hide.
So could you please tell me where i can find 'suppress result' option for the keyfigure .
Many thanks

How can hide the command line of a t.code in the portal

Dear Experts.
I have the following doubt:
How can hide the Command Line of a Report that is called with a T.Code in the portal?
Attach Image:
[Image T.Code|http://www.freeimagehosting.net/uploads/eab3b6a03c.jpg]
When I created a service using the T.Code SICF for the T.Code , I can hide buttons and the filed command line using
~webgui_simple_toolbar
~singletransaction
~NOHEADEROKCODE
With notes 1010519, "SAP GUI for HTML: Simplified Title Area Without Menu and OK Code" and 959417.
But the problem is that when I create the service in the T.Code SICF, I also have that create an Iview IAC in the portal.
The Question is : How can hide this fields and buttons if I want Publish the T.code using an Iview Transaction in the portal?
In this moment I have used the two options:
1 option) I created a service using the t.Code SICF for my Transaction and I also created an Iview IAC in the portal for call the service.
RESULT:
SAP Web Application Server
         500 Connection timed out
        Error: -5
       Version: 7000
       Component: ICM
       Date/Time: Sat Jun 12 20:26:39 2010
       Module: icxxthr_mt.c
       Line: 2698
       Server: xyxab...
Error Tag: {-}
Detail: Connection to partner timed out after 60s
2) created an Iview Transaction in the portal and call my transaction.
RESULT.
[Image T.Code|http://www.freeimagehosting.net/uploads/eab3b6a03c.jpg]
But not can hide the field Command Line and other buttons.
I think that the command :
~webgui_simple_toolbar
~singletransaction
~NOHEADEROKCODE
Only can be used if I create a service using the T.Code SICF .
Best Regards
Carmen.

Hi Carmen,
The bottom line is that this cannot be done for transaction iviews without modifying the standard webgui service in SICF, which is probably not a good idea (since it affects everyone using SAP GUI for HTML). (You could hack the appintegrator to add the ~webgui_simple_toolbar parameter to the transaction URL template in the portal, but again its not a recommended thing to do ...). Better to create an IAC service in SICF with ~webgui=1 where you set the required appearance using an appropriate value for ~webgui_simple_toolbar, and then create an IAC iview to point at this service.
You can even override the ~transaction value configured in the new service in individual IAC iviews by entering the appropriate value in the application parameter of the iview, for example:
~okcode=/nSU01
And you can pass parameters in the same way:
~okcode=/nSU01 USR02-BNAME=xyz;USREFUS-USERALIAS=abc;
By the way, it would not be recommended to create a URL iview to access an IAC, since you are likely to encounter session management issues in this scenario - better to use an IAC iview.
Regards, Rory

Cisco Prime how to hide SSID

Hi there.
I need to hide SSID from broadcast from Cisco Prime.
I can do this easily on WLC by un-checking 'broadcast' under SSID on WLC but I have controller which I only have access through Cisco Prime.
So I would like to find out how I can disable broadcast on Cisco Prime please.
Thanks in advance

Refer : creating / adding templates
http://www.cisco.com/c/en/us/td/docs/wireless/prime_infrastructure/1-3/configuration/guide/pi_13_cg/temp.html#20699

How to hide Bottom Line in Report ?

Hi everyone,
We are working on Reports 11gr2 64-bit.
In every report, when text is completed on a page, a horizonal line (i.e. bottom line) at the end of the every page is shown and printed unnecessarily.
But creates problem in printed stationary, specially in Cheque-printing.
Kindly advise me how to hide this bottom-line, specially in printing.
Thanks.
Dev.
Edited by: ocpdev on Apr 5, 2013 6:29 PM

HI
Is these reports are developed on 11g or migrated from earlier version.
Anyhow, to test it, - create a report from scratch on 11g and run it, Also check the Footer for any Lines on it.
I hope you can identify the issue by redoing the thing for testing
Best of luck
ocpdev wrote:
Hi everyone,
We are working on Reports 11gr2 64-bit.
In every report, when text is completed on a page, a horizonal line (i.e. bottom line) at the end of the every page is shown and printed unnecessarily.
But creates problem in printed stationary, specially in Cheque-printing.
Kindly advise me how to hide this bottom-line, specially in printing.
Thanks.
Dev.
Edited by: ocpdev on Apr 5, 2013 6:29 PM

How to hide line console parameters through Cisco ACS

Similar Messages

Maybe you are looking for