Security
For TACACS+ authorization, SR OS sends the entire CLI context in the cmd and cmd-arg values.
Here is a set of examples where the CLI context is different:
- *A:dut-c# configure service
- *A:dut-c>config>service# vprn 555 customer 1 create
- *A:dut-c>config>service>vprn$ shutdown
This results in the following AVPairs:
cmd =configure
cmd-arg=service
cmd=configure
cmd-arg=service
cmd-arg=vprn
cmd-arg="555"
cmd-arg=customer
cmd-arg=1
cmd-arg=create
cmd=configure
cmd-arg=service
cmd-arg=vprn
cmd-arg="555"
cmd-arg=customer
cmd-arg=1
cmd-arg=create
cmd-arg=shutdown
7450 ESS System Mangement Guide
Page 31