All MIBs › RC-TACACS-MIB › rcTacacsNncliCommandAuthorizationEnabled
rcTacacsNncliCommandAuthorizationEnabled
Module: RC-TACACS-MIB
OID (symbolic): RC-TACACS-MIB::rcTacacsNncliCommandAuthorizationEnabled
OID (numeric): 1.3.6.1.4.1.2272.1.65.1.7
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This object controls whether TACACS+ will be used for authorization of individual NNCLI commands.
What is rcTacacsNncliCommandAuthorizationEnabled?
This true/false switch controls whether TACACS+ is used to authorize each individual NNCLI (Nortel/Avaya CLI) command a user attempts to run, defaulting to false. An admin enables this for command-level accountability, so that even after a user has logged in, TACACS+ approves or denies each specific command before it executes, rather than only checking access at login time. For example, an admin wanting to prevent junior operators from running a "reload" command would set rcTacacsNncliCommandAuthorizationEnabled to true(1) and configure the TACACS+ server to reject that command for their privilege level.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2272.1.65.1.7 snmpwalk -v2c -c public <target> RC-TACACS-MIB::rcTacacsNncliCommandAuthorizationEnabled
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2272.1.65.1.7.1 snmpget -v2c -c public <target> RC-TACACS-MIB::rcTacacsNncliCommandAuthorizationEnabled.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.2272.1.65.1.7.1 s <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> rcTacacsNncliCommandAuthorizationEnabled.1
Start monitoring Bay Networks/Nortel Rapid-City series switch (TACACS+ AAA client configuration) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the RC-TACACS-MIB::rcTacacsNncliCommandAuthorizationEnabled OID value, configure state conditions and alerts, and monitor any Bay Networks/Nortel Rapid-City series switch (TACACS+ AAA client configuration) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2272 | rapidCity | RAPID-CITY |
| 1.3.6.1.4.1.2272.1 | rcMgmt | RAPID-CITY |
| 1.3.6.1.4.1.2272.1.65 | rcTacacs | RAPID-CITY |
| 1.3.6.1.4.1.2272.1.65.1 | rcTacacsGlobal | RAPID-CITY |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2272.1.65.1.7 | rcTacacsNncliCommandAuthorizationEnabled | RC-TACACS-MIB |