We have a Cisco ACS that we are using Radius to authenticate with
out Juniper Router. This works fine. I want to set a specific set of
commands to allow and deny from the Cisco ACS. I know this is
possible, I think I just might not have the syntax correct. The field
“Juniper-Allow-Commands” requires that I write the expression in
regular expressions. I want to make sure I have the commands
correct because I can’t get it to work right on the router.
Do you know if this will work…
^edit .* |^configure .*
I think this command should append “edit” and “configure” to the cli
authorization on the juniper router. Any help would be great. Thank
You!
I might not have explained what my goal is so, so ask questions if
you need to.