A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company…

To control which commands managers are allowed to enter on AOS-CX switches using HPE Aruba

Networking ClearPass Policy Manager (CPPM) as a TACACS+ server, you need to add the Shell service

to the TACACS+ enforcement profiles for the managers. This service allows you to define and enforce

specific command sets and access privileges for users authenticated via TACACS+. By configuring the

Shell service in the enforcement profile, you can specify the commands that are permitted or denied

for the managers, ensuring controlled and secure access to the switch's command-line interface.

Reference: Aruba's ClearPass Policy Manager documentation provides detailed instructions on

setting up TACACS+ services, including configuring Shell profiles for command authorization and

enforcement policies.