Router Management

RADIUS doesn’t support limiting the user access to specific router commands as a tool for router management or terminal services.

TACACS+ supports two methods for controlling the authorization of router commands on either a per-user or a per-group basis.

• Assign commands to privilege levels and have the router use TACACS+ to verify that the user is authorized at the specified privilege level.

• Explicitly define the commands allowed on a per-user or a per-group basis on the TACACS+ server.