Restrict telnet access for specific users on ios router

aaa new-model
aaa authentication login default local
username aaa password aaa
username bbb password bbb
user aaa should have ssh and telnet access.
user bbb is only used for vpn authentication, i dont want him to access router via ssh or telnet ,even in user exec mode.
i also can not apply access-class on vty lines because i am loging in device from different places ,and dont know exact ranges of ip address to create access-list
radius and tacacs is not option for me
what can be done in order to restrict user bbb from ssh and telnet access ?

OK. I did not clearly remember the OP description of aaa and bbb. So for bbb to only have VPN access try
User bbb password bbb privilege 0
HTH
Rick
Sent from Cisco Technical Support iPhone App

Similar Messages

HELP needed on Remote Management set to allow access for all users

my mac mini snow leopard server runs in a data center and i use screen sharing to interact with it. i played with the sharing settings remotely yesterday and changed "allow access for" to all users. i was disconnected immediately and i couldn't logon again. i have no luck changing to other users. i don't want to make a special trip to the center to change it back to whatever it used to be. i can still use afp to connect but the screen sharing option is no longer available. what does "allow access for all users" mean anyway?
thanks!

As its name implies, allow access for all should allow any valid user account to access the server. I'm not sure why it's no longer working. It almost sounds like the ARDAgent crashed.
Either way there's a command-line interface to the ARD preferences:
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart
man kickstart discusses the options, including examples of how to enable access for specific users.

Restricting Access for SQ01 User Group

Hi ,
Please let me how to Restrict Access for a User Group to only some of the specific users?
Thank you
Edited by: Vibhor Arora on Apr 12, 2010 7:29 AM

Hi,
Can you please clarify what exactly you want to know, your request can be interpreted in a few different ways.
If you are concerned that people have access to all user groups, then you need to remove access to S_QUERY activity 02 and I think activity 23. They will lose access to all user groups that they are not assigned to via SQ03.

How to apply Software Restriction policy for specific user in local group policy object ?

I am working on implementing user based software restriction policy programmatically for local group policy object.
If i create a policy through Domain Controller,i do have option for software restriction policy in user configuration but in local group policy editor i don't have option for that.
When i look for the changes made by policy applied from Domain Controller in registry, they modifies registry values for specific users on path HKEY_USERS\(SID of User)\Softwares\Policies\Microsoft\Windows\Safer\Codeidentifiers
They also have registry.pol stored in SYSvol folder in Domain Controller. When i make the same changes in registry to block any other application, application is getting blocked.
I achieved what i wanted but is it right to modify registry values ?
PS:- I am using Igrouppolicyobject API

I achieved what I wanted but is it right to modify registry values ?
You also can modify a registry programmatically based policy. Check this:
http://blogs.msdn.com/b/dsadsi/archive/2009/07/23/working-with-group-policy-objects-programmatically-simple-c-example-illustrating-how-to-modify-a-registry-based-policy.aspx
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some users and allow the access for some users?

I have a requirement to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some of the users and allow the access for some of the users.
I have applied the below code on the web.config file but this modification impacting only on the web application level not on the site collection and sub site level.
<location path="_layouts/15/InPlaceRecordsSettings.aspx">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
</location>
<location path="_layouts/15/InPlaceRecordsListSettings.aspx">
    <system.web>
      <authorization>
        <deny users="*" />
      </authorization>
    </system.web>
</location>
When I tried the access on
:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx">http://<servername>:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx page allowed the access for all users.
Please suggest the possible solution to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages on SharePoint2013.
Thanks
Ramasubbu

You can't do it from OOTB.
_layout folder is accessible to the users if they have read access in any of the site even subsite.
You can modify *.aspx file, add your custom control which will check user.
[custom.development]

How can i open period for specific user in OB52.

Hi Expert,
How can i open period for specific user in OB52. As 'Authorisation Group' field is there in OB52, how can i use this field to restrict the specific user to post for particular period. How can i creat authorisation group and where can i assign it to the particular user...
Please let me know?
Thanks and regards,
Sam.

Hi,
Here is the detailed process as outlined in SAP help.
Procedure
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
Examples
A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
Thanks
Venkata Ganesh Perumalla

How To Show a Tab/Page in APEX for specific users

Hi,
I have created a page in APEX. I want to restrict the page access to all the users except two or 3 users(Admin users ).How do i restrict the access for a page/tab.Please help.I have enabled SSO authentication for my Application.

i havent tested.. but this should work. i am no expert on these either, just to give you an example.. :-)
JEditorPane ePane = new JEditorPane();
HTMLEditorKit html = new HTMLEditorKit();
ePane.setEditorKit(html);
HTMLDocument htmld = new HTMLDocument();
try{
URL url = new URL("http://hcs.harvard.edu/~undercon/");
InputStream ins = url.openStream();
ePane.setDocument(htmld);
html.read(ins,htmld, 0);
this.getContentPane().add(new JScrollPane(ePane),BorderLayout.CENTER);
catch(Exception e)
e.printStackTrace();
}

After installing Mountain Lion, why is there Yahoo access for one user but not another?--both are administrators.

After installing Mountain Lion, why is there Yahoo access for one user but not another?--both are administrators.

We've had several instances where we have had to run chkdsk on arrays with over 1m files. Average completion time is approximately 72 hours. The maximum downtime window they have available is the 64 hour weekend window. File sizes and number of files were
much smaller then than they are now.
The idea, in theory, was to use VHDs to compartmentalize the data into smaller volumes which could be more easily managed. It would also improve performance when transferring these compartments of data as they would use sequential read/write rather than
fragmented/random. This idea was never fleshed out in entirety, they don't split data up into little containers, but simply into big ones per project. Hence the 11m files in one container that I am currently trying to diagnose.
Some other important facts: The VHD in question is mounted in B:/project/ as this server also allows remote workers to log in, but they are restricted to see only data in E:. Disks A-D are hidden via group policy.
Update: icacls is failing on a large number of files within this dataset. I counted the path characters to ensure it wasn't the 255 character limit I was encountering and verified that the paths being blocked are only about 150 characters long. Once it finishes,
I'll have to try taking ownership and then re-running it. At this point I still have no idea how long to expect. I'm running out of time as the environment will be in use again at 9AM tomorrow morning.

Log transactions for specific users

Hi, How can I get the log for specific users, such as SAP_ALL : I want to know which transactions they have accessed in the last month for example or if they have accessed to a specific transaction.
Thks !

Hi,
try tranction ST03N (Workload Monitor)and select "User Profile" in the Analysis View. There, you can see a list of Users. Double click on any of them to see the accessed transactions.
Kind regards
Dirk

Disable sound for specific users

How do I disable sound for specific users?

Theoretically if the user's not in the audio group, he shouldn't have access to sound devices.
$ ll /dev/snd/
total 0
drwxr-xr-x 2 root root 80 Oct 2 19:30 by-path
crw-rw----+ 1 root audio 116, 2 Oct 2 19:30 controlC0
crw-rw----+ 1 root audio 116, 8 Oct 2 19:30 controlC1
crw-rw----+ 1 root audio 116, 7 Oct 2 19:30 hwC0D0
crw-rw----+ 1 root audio 116, 13 Oct 2 19:30 hwC1D0
crw-rw----+ 1 root audio 116, 14 Oct 2 19:30 hwC1D1
crw-rw----+ 1 root audio 116, 15 Oct 2 19:30 hwC1D2
crw-rw----+ 1 root audio 116, 16 Oct 2 19:30 hwC1D3
crw-rw----+ 1 root audio 116, 4 Oct 4 09:12 pcmC0D0c
crw-rw----+ 1 root audio 116, 3 Oct 4 10:13 pcmC0D0p
crw-rw----+ 1 root audio 116, 5 Oct 2 19:30 pcmC0D1p
crw-rw----+ 1 root audio 116, 6 Oct 2 19:30 pcmC0D2c
crw-rw----+ 1 root audio 116, 9 Oct 2 19:30 pcmC1D3p
crw-rw----+ 1 root audio 116, 10 Oct 2 19:30 pcmC1D7p
crw-rw----+ 1 root audio 116, 11 Oct 2 19:30 pcmC1D8p
crw-rw----+ 1 root audio 116, 12 Oct 2 19:30 pcmC1D9p
crw-rw----+ 1 root audio 116, 1 Oct 2 19:30 seq
crw-rw----+ 1 root audio 116, 33 Oct 2 19:30 timer

MIGO - Challan NO : Feild mandatory for specific user

Hi Experts,
I want to make the Callan No in the MIGO as mandatory for specific users.Can any body tell me how to do this ?
Regards,
Lakshmi.

Dear
There is two possibility.
1 - SPRO->Material Management->IM and PI-> Settings for enjoy transactions ->settings for goods Movements (MIGO)->Field selection for MIGO.Then against Field name choose the radio button Req.
This will impact for all the user.
2 - If you would like to restrict for particuar user than use of SHD0.
Create screen/transaction variant of MIGO through SHd0. In this put your req. field compulsory.Revoke the authorization of MIGO from particular user and assing the new transaction code done through SDH0 to this user.
Due to this you can control req. entry in MIGO for particular user.
Regards
Rajan

Lock Transaction for Specifi Users

Dear All,
Good Day,
We are planning to lock the transaction for specific user who doesnot use the transaction more than 3 months.
Please suggest me what will be the procedure.
Thanks in advance,.
Best Regards,
Suresh Kumar K

Hi Suresh,
Your idea of restricting users in using t-code is good practice. But as of now there is nothing like you can restrict user by locking t-code only for tht user/users alone.
1. You can lock the T-code but this will affect entire system.
2, You can remove t-code from the role, but this affect other user and if you wanted to make another role for only this user it will start getting to be tedious job, since you have to delete some roles create some other and alos user may use some t-code once every quarter for some of quarter end results and you have to seperate these t-code from others which was not possible, this will not workout so easily.
The only option could be probably if user doesnot login for more than 3months just lock him.
Regards...

Find Label Missing in Advanced Search For Specific User

for specifi users FIND label is showing but some of the users in advanced search this find label is missing . top of the applictaion it is there
plz let me know why this is problem is coming
find button should visible to all users......................
give me repaly ASAP

Hi
CRM 5.0
its not related to application,modification ..but my problem is the find label is working for some of the users.but some of the users find label is not there,
plz let me know where i have to make corrections for this problem........

Giving Access for an User On One Schema.

Hi all,
I want to give read,write and execute access for an user in one schema and only read access to another two users.
How can I give..Please suggest.

Hi,
Well in that case you may have to give the select privilege to a particular user for all tables.
Or
You may like to create two roles, and give select privilege to a particular role for all tables. And give write i.e. insert/update privilege to the other role. Then assign this role to the user whom you like to give the access.
Regards
Anurag Tibrewal.

Data Level security for specific Users

Hi,
Can you please suggest some ideas on by-passing the Data Level security for specific users or specific group?
Currently, we have data level security defined on a group permissions for one group and for people belonging to another group, the security should not apply and they should see entire data.
But, key thing here is that, the user belongs to both the groups.
Any ideas helps.
Thanks,
Chandu.

So you are saying you want a user to belong to a group with data-level security filters, but you don't want the filters to apply to that user?
Why are they in the group then?
Are the data filter defined with variables or are the hard-coded?
If variables, you may be able to put logic in initialization block to set the variable appropriately for specific users.
I'd rethink the security model - when I define data level security filters, I tend to force users to only belong to a single group/role.

Restrict telnet access for specific users on ios router

Similar Messages

Maybe you are looking for