<html><head><meta name="qrichtext" content="1" /></head><body style="font-size:10pt;font-family:Sans Serif">
<p>hi @all,</p>
<p></p>
<p>i´m trying to do some authorization stuff, but it doesn´t work in the way i thought it should.</p>
<p></p>
<p>if i´ve got the following entry:</p>
<p></p>
<p><span style="font-weight:600">on tacacs+:</span></p>
<p></p>
<p>user = test {</p>
<p>login = cleartext test</p>
<p>cmd = show { permit ver }</p>
<p>cmd = traceroute { permit .* }</p>
<p>cmd = logout { permit .* }</p>
<p>}</p>
<p></p>
<p><span style="font-weight:600">on router:</span></p>
<p></p>
<p>aaa authentication login tac_list group tacacs+ local</p>
<p>aaa authorization exec auth1 group tacacs+</p>
<p></p>
<p>line vty 0 4</p>
<p>access-class 2 in</p>
<p>authorization exec auth1</p>
<p>login authentication tac_list</p>
<p>transport input ssh</p>
<p></p>
<p>vty 5 => </p>
<p>are disabled</p>
<p></p>
<p>the user shouldn´t be able to do a "show ip interface brief", right?</p>
<p>tia</p>
<p></p>
<p>cheers </p>
<p>tom</p>
</body></html>