Setting up permissions with Cisco ACS 5 and TACACS+

For background on remote user privileges and group privileges generally, see:

• How do I grant privileges to remote AAA users?
• Built-in user groups and adding custom groups

The steps below show how to setup the permissions in Cisco ACS 5 for TACACS+.

First and foremost check the Serial & Network -> Authentication -> Use Remote Groups box in the Opengear web UI, and Apply.

Opengear administrators

To grant admin-level privileges, all you need is a profile with a Privilege level of 12-15:

Restricted Opengear users

Setup a profile for restricted users by configuring Custom Attributes:

The users group grants limited access to the web UI and CLI.  Any serial port or managed device access needs to be specified by custom groups set up on the Opengear. You may specify multiple groups with comma separation. See here for information about Opengear groups.

You may also set admin permissions from the Custom Attributes page rather than using the Privilege level method.  Instead of users,custom groups you simply specify admin group.