Cisco Tech Talk: TACACS+ Configuration on Cisco ISE for C1300 – Part 3
Welcome to the third and final part of our Cisco Tech Talk series on configuring TACACS+ with Cisco ISE! Now that we’ve established our profiles, it’s time to implement the most powerful feature of TACACS+: Granular Command Control. In this episode, we demonstrate how to create Command Sets to restrict or allow specific actions on your Cisco Catalyst 1300 Series switches. Whether you need a "View Only" group that can only run "show" commands or a "Net Admin" group with full access (excluding sensitive AAA configurations), we show you how to build these policies step-by-step. We also dive into Device Admin Policy Sets, showing you how to tie your users, device groups, and command sets together into a cohesive security policy. Note: Granular command authorization requires Firmware 4.1.7 or later on Catalyst 1300 switches. While ISE configuration is outside the standard support scope for Cisco Small Business products, this series provides a comprehensive reference for professional-grade deployments. What You Will Learn in This Video: -Creating Command Sets: How to use the new granular control features available in Firmware 4.1.7. -Permit vs. Deny Logic: Understanding the "permit any command not listed" checkbox for flexible security. -Role-Based Access: Setting up specific command sets for "Net Admin" (Full Control) vs. "View Only" (Read-Only). -Privilege Escalation: Why the "enable" command must be explicitly allowed in command sets for Level 1 and 7 users. -Policy Set Configuration: How to use conditions (IP, device type, vendor) to apply the right rules to the right devices. -Monitoring Hits: Using the "hits" counter to verify that your policies are being triggered correctly. -Mapping Groups: Connecting User Identity Groups to their respective TACACS+ Profiles and Command Sets. Watch the Full Series: Part 1 (ISE Setup): https://www.youtube.com/watch?v=voNVufPkE_8&t=5s Part 2 (Set Up Profiles): https://www.youtube.com/watch?v=wGvk-Xw1p2s&t=45s Related links: Cisco Small Business Overview → https://www.cisco.com/site/us/en/solutions/small-business/index.html?dtid=osclytb001772 Cisco Support → https://www.cisco.com/c/en/us/support/index.html?dtid=osclytb001772 Discover how Cisco is transforming industries with cutting-edge technology and business-driven innovation. Learn more: Cisco Official Site → https://www.cisco.com/?dtid=osclytb001772 Cisco Products & Services → https://www.cisco.com/site/us/en/products/index.html?dtid=osclytb001772 Cisco Solutions → https://www.cisco.com/site/us/en/solutions/index.html?dtid=osclytb001772 Contact Us → https://www.cisco.com/site/us/en/about/contact-cisco/index.html?dtid=osclytb001772 Follow Us on Social Media: Cisco LinkedIn → https://www.linkedin.com/company/cisco Cisco X → https://twitter.com/Cisco Cisco Instagram → https://www.instagram.com/cisco Cisco Facebook → https://www.facebook.com/Cisco Got questions or insights? Drop them in the comments—we'd love to hear from you! Don’t forget to like, subscribe, and hit the bell icon to stay updated on the latest with Cisco. #CiscoTechTalk #CiscoCatalystSwitches #NetworkTutorial #CiscoISE #TACACS #NetworkAdmin #CyberSecurity #Networking #IdentityServicesEngine #NetworkSecurity