Cisco 2509 - Router - EN User Manual page 636

Action Codes
Table F-5 Action Codes for Modifying TACACS+ and RADIUS Group and User Settings (continued)
Action
Code Name
176 ADD_IOS_
COMMAND_ARG
177 REMOVE_IOS_
COMMAND_ARG
User Guide for Cisco Secure ACS for Windows Server
F-24
Required Description
UN|GN, Specifies a set of command-line arguments that are either
VN, V1, V2 permitted or denied for the Cisco IOS command
contained in VN. The command must have already been
added via Action 174:
GN = "Group 1"
VN = "telnet"
V1 = "permit"
V2 = "10.1.1.2"
or
UN = "fred"
VN = "show"
V1 = "deny"
V2 = "run"
The first example will allow the telnet command with
argument 10.1.1.2 to be used by any user in Group 1.
The second example ensures that user fred cannot issue
the Cisco IOS command show run.
UN|GN, Remove the permit or deny entry for the given Cisco IOS
VN, V2 command argument:
GN = "Group 1"
VN = "telnet"
V2 = "10.1.1.1"
or
UN = "fred"
VN = "show"
V2 = "run"
Appendix F RDBMS Synchronization Import Definitions
78-14696-01, Version 3.1