Avaya ERS 2500 Technical Configuration Manual page 31

IDE Step 4 – Go to Site Configuration -> Access Policies -> TACACS+ -> default-tacacs-admin

Go to the Authorization Policy tab and click on Edit.
o
Once the Edit Authorization Policy window pops up, click on Add. Add three Rules
simply named ro, level10, and level15
o
For the rule named ro, click on New to add a new constraint. From Attribute
Category, select User and scroll down and select user-id. Select Equal To with
Format of None and enter the read-only-access user id of read. Click on OK when
done. Via Action, select Allow. Via the Command Sets tab, select level1 via All
Command Sets and click on the less-than arrow key to move the attribute to the
Allow Commands in Set window. Next, click on the Session Values tab, check off
Privilege Level and enter 1.
o
For the rule named level10, click on New to add a new constraint. From Attribute
Category, select User and scroll down and select user-id. Select Equal To with
Format of None and enter the read-only-access user id of user10. Click on OK
when done. Via Action, select Allow. Via the Command Sets tab, select level10 via
All Command Sets and click on the less-than arrow key to move the attribute to the
Allow Commands in Set window. Next, click on the Session Values tab, check off
Privilege Level and enter 10.
o
For the rule named level15, click on New to add a new constraint From Attribute
Category, select User and scroll down and select user-id. Select Equal To with
Format of None and enter the read-only-access user id of user15. Click on OK
when done. Via Action, select Allow. Via the Command Sets tab, select all-
commands via All Command Sets and click on the less-than arrow key to move
the attribute to the Allow Commands in Set window. Next, click on the Session
Values tab, check off Privilege Level and enter 15.
o
Click on Ok when done.
o
When completed, you can view the complete policy by clicking on the Access
Policy Summary button
Avaya Inc. – External Distribution
avaya.com
30